-[SSO](https://lmddgtfy.net/?q=SSO): Single Sign On
-[SSO](https://lmddgtfy.net/?q=SSO): Single Sign On
- SLO: Single Log Out
- SLO: Single Log Out
...
@@ -81,7 +80,7 @@ If you have `nginx` serving pages to users, you might need to configure `x-frame
...
@@ -81,7 +80,7 @@ If you have `nginx` serving pages to users, you might need to configure `x-frame
With `ssoauth` the only way to assign permissions is with groups:
With `ssoauth` the only way to assign permissions is with groups:
- when user logs in, `ssoauth` receives group names from the IDP
- when user logs in, `ssoauth` receives group names from the IDP
- if your project has `django.contrib.admin``Groups` with exactly the same names, as received from the IDP, these groups are assigned to the user (`django.contrib.auth``User` is automatically created)
- if your project has `django.contrib.admin``Groups` with exactly the same names, as received from the IDP, these groups are assigned to the user.
- all other groups and permissions are automatically removed from the user (so it's not possible to "patch" what IDP says with some extra rules in the project)
- all other groups and permissions are automatically removed from the user (so it's not possible to "patch" what IDP says with some extra rules in the project)
You can predefine some groups in project settings (see `ssoauth` default config for details). These predefined groups will be created automatically (when migrating). For example, a superuser group:
You can predefine some groups in project settings (see `ssoauth` default config for details). These predefined groups will be created automatically (when migrating). For example, a superuser group:
