Merge attribute values back into user object.

Open jazzzpor opened this issue 8 years ago • 1 comments

I was wondering if it is possible to merge the attributes from the SamlSpToken back into the user object. In my perticular use case I want to update the user roles provided by the IdP in the database after a successful login.

Edit: As a workaround I have not specified the "provider" option in the firewall config. This way the user_creator service is always used after a succesful login. This feels like a hack though.

Dec 22 '17 13:12 jazzzpor

Can anyone provide some information about this case. We also need to update the user roles as well as some user properties based on the SAML response?

May 21 '18 15:05 cfoehrdes