SSO users aren't automatically added to email domain-based groups

mbb70 · October 20, 2017, 5:14pm

When you are generating your SSO payload, you can set the add_groups field based on your user’s email, where add_groups is a comma delimited string of groups. I haven’t seen any documentation on this but the code is pretty clear:

github.com/discourse/discourse

app/models/discourse_single_sign_on.rb

9813f9f0f


      
          if add_groups
            split = add_groups.split(",").map(&:downcase)
            if split.length > 0
              Group.where('LOWER(name) in (?) AND NOT automatic', split).pluck(:id).each do |id|
                unless GroupUser.where(group_id: id, user_id: user.id).exists?
                  GroupUser.create(group_id: id, user_id: user.id)
                end
              end
            end
          end

That was our workaround to this issue and it has been working so far.

Topic		Replies	Views
Automatic addition of users to group based on email domain SSO	5	1600	April 8, 2020
Users are not added to the moderators groups when registering with SSO Bug sso , discourseconnect	2	2300	May 17, 2016
Groups not being added to new users SSO	3	1961	July 31, 2017
Permissions not being applied to new or existing users by domain Support	8	1096	September 5, 2018
SSO and Restricted Groups SSO	2	3024	March 1, 2017

SSO users aren't automatically added to email domain-based groups

Related topics