canonicized about-group-permissions

This commit is contained in:
martyav
2023-06-09 02:02:33 -04:00
parent 6aefcd5d44
commit b3b17e58b9
4 changed files with 17 additions and 9 deletions
@@ -2,9 +2,11 @@
title: Group Permissions with Shibboleth and OpenLDAP
---
This page provides background information and context for Rancher users who intend to set up the Shibboleth authentication provider in Rancher.
<head>
<link rel="canonical" href="https://ranchermanager.docs.rancher.com/pages-for-subheaders/configure-shibboleth-saml">
</head>
Because Shibboleth is a SAML provider, it does not support searching for groups. While a Shibboleth integration can validate user credentials, it can't be used to assign permissions to groups in Rancher without additional configuration.
Because Shibboleth is a SAML provider, it doesn't support searching for groups. While a Shibboleth integration can validate user credentials, it can't be used to assign permissions to groups in Rancher without additional configuration.
One solution to this problem is to configure an OpenLDAP identity provider. With an OpenLDAP back end for Shibboleth, you will be able to search for groups in Rancher and assign them to resources such as clusters, projects, or namespaces from the Rancher UI.