Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Feature request: Allow accounts to be deactivated when the user is removed from an external auth provider #5285

Open
TheLastProject opened this issue May 29, 2019 · 3 comments
Labels
A-Account-Deactivation "Deleting"/"Removing" a user, GDPR erasure (erased) O-Uncommon Most users are unlikely to come across this or unexpected workflow S-Minor Blocks non-critical functionality, workarounds exist. T-Enhancement New features, changes in functionality, improvements in performance, or user-facing enhancements. z-feature (Deprecated Label) z-p2 (Deprecated Label)

Comments

@TheLastProject
Copy link

Description:

Currently, I'm using Synapse together with mxisd as identity server (which uses LDAP as backend). It would be great if Synapse could occasionally check if the users still exist according to the identiy server, so that accounts can be automatically deactivated. A similar idea to https://docs.nextcloud.com/server/15/admin_manual/configuration_user/user_auth_ldap_cleanup.html, but then for identity servers in general instead of explicitly LDAP.

@richvdh
Copy link
Member

richvdh commented May 29, 2019

I think this is a duplicate of #4158?

@TheLastProject
Copy link
Author

Hmm, I'd like the account completely disabled/deleted so it also doesn't show up in the directory anymore, but it's at very least similar, yes.

@richvdh
Copy link
Member

richvdh commented May 29, 2019

Ah right, yes.

There's more than one way to implement this, and I'm not sure a periodic callout to the identity server is the right one, since it would only work with mxisd setups. A more general solution is needed for external authentication providers in general.

@richvdh richvdh changed the title Check if users still exist on identity server Feature request: Allow accounts to be deactivated when the user is removed from an external auth provider May 29, 2019
@neilisfragile neilisfragile added z-feature (Deprecated Label) z-p2 (Deprecated Label) labels Jun 4, 2019
@MadLittleMods MadLittleMods added the A-Account-Deactivation "Deleting"/"Removing" a user, GDPR erasure (erased) label Apr 3, 2023
@squahtx squahtx added S-Minor Blocks non-critical functionality, workarounds exist. T-Enhancement New features, changes in functionality, improvements in performance, or user-facing enhancements. O-Uncommon Most users are unlikely to come across this or unexpected workflow labels Apr 3, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
A-Account-Deactivation "Deleting"/"Removing" a user, GDPR erasure (erased) O-Uncommon Most users are unlikely to come across this or unexpected workflow S-Minor Blocks non-critical functionality, workarounds exist. T-Enhancement New features, changes in functionality, improvements in performance, or user-facing enhancements. z-feature (Deprecated Label) z-p2 (Deprecated Label)
Projects
None yet
Development

No branches or pull requests

5 participants