🔗 Ligoj Identity plugin

API plugin used for compatibility check

Ligoj Identity plugin This a very complex plugin managing security constraints depending on the authorization of current user and are massively based on RBAC and delegates. Provides the following features :

• User, group and company management
• Scope of container (group and company) to name macro set of containers
• Delegates to user/group/company of a subset of current user depending on propagation constraints
• Activity export for a group

Dashboard features :

• Amount of users in the linked group

Related plugins:

• plugin-id-sql
• plugin-id-cognito
• plugin-id-ldap
• plugin-id-ldap-embedded

Plugin parameters

Parameter	Scope	Default	Note
service:id:user-display	Global	id	Displayed username mode: id (login), mail (first attached mail, fallback id), mail-short (mail without the domain part), any user attribute name (firstName, lastName, company, ... — also resolved in the customAttributes map, fallback id), or an expression combining ${token} placeholders and literal text, e.g. ${firstName} ${lastName} (each token is one of the previous modes; unresolved tokens render empty, blank result falls back to id).
service:id:uid-pattern	Node, Subscription	.*	Pattern determining the login is valid for an authentication.
service:id:ou	Node, Subscription	null	Parent OU.
service:id:group	Node, Subscription	null	Normalized Group name (CN).
service:id:parent-group	Node, Subscription	null	Normalized parent Group name (CN).