Jump to content

Topic on Extension talk:SimpleSamlAuth/Flow

help with automatic group removal

1
Revansx (talkcontribs)

From the example in the page (code below) I am able to add users to groups based on their SAML attributes:

// Array: [MediaWiki group][SAML attribute name][SAML expected value]
// If the SAML assertion matches, the user is added to the MediaWiki group
$wgSamlGroupMap = array(
	'sysop' => array(
		'groups' => array('admin'),
	),
);

however, once added, users are added, this code does not remove them the groups that they are added to. Is this expected behavior? I'm wondering what the rigth/best way is to remove members from a group based on SAML as well. Does anyone have any experience with this?

Reply to "help with automatic group removal"