Hi Dojo,
We're evaluating if we can configure a staging server for JIT (Just-In-Time) provisioning of DataMiner users via the iDP - the IDP is among those supported - I'm thinking to create a landing group for that, so that users automatically created will be part of a default group - posting if there is any experience that anyone wants to share
thanks
Wale Oguntoyinbo [SLC] [DevOps Advocate] Answered question
SAML authentication in DataMiner has an auto-provision feature. Users logging in for the first time are created and added to a defined group automatically. More details on how to set this up can be found here.
Not sure if this is exactly tailored to your use-case but hope it helps.
Bert Vandenberghe [SLC] [DevOps Enabler] Posted new comment
That's indeed correct. DataMiner can automatically create the users in DataMiner, the first time they enter via SAML. Upon creation those users can be assigned to a default landing group. It is also possible to add a group claim to the users coming in (= so the groups claim is optional). This needs to be configured in your identity provider, and then DataMiner will add the user in the group which is specified in that groups claim. For this to work, you need a group in DataMiner with exactly the same name as specified in the groups claim.
Wale already provided the link to the documentation for Entra ID, we also have this documented for Okta. This should also work for other identity providers, but don't hesitate to reach out if you would experience difficulties.
Bert