feat(sso/groups): Add grp_cri_nps

2025-02-04 15:15:44 +01:00 · 2025-02-04 15:15:44 +01:00 · 2f2cee559e
commit 2f2cee559e
parent bf324738b1
1 changed files with 7 additions and 0 deletions
--- a/machines/nixos/compute01/kanidm/default.nix
+++ b/machines/nixos/compute01/kanidm/default.nix
@ -85,6 +85,7 @@ in
      groups =
        {
          grp_active.members = catAttrs "username" (attrValues meta.organization.members);
+          grp-ext_cri.memberless = true;
        }
        // (mapAttrs' (
          name: members: nameValuePair "grp_${name}" { members = builtins.map usernameFor members; }
@ -163,6 +164,12 @@ in
            "profile"
            "email"
          ];
+
+          scopeMaps.grp-ext_cri = [
+            "openid"
+            "profile"
+            "email"
+          ];
        };

        dgn_outline = {