Adds support to automatically add (and optionally create) user groups to users in Komodo using OIDC claim data.
This requires an update to the underlying auth server Komodo uses. Upon the merge of this PR, this PR will be updated with the new release version and undrafted.
Config shape:
## Sync Komodo User Group memberships from an OIDC claim on every OIDC login.
## Only memberships previously synced from OIDC are removed when claims change.
oidc_sync_user_groups = false
## OIDC claim used for User Group sync.
## Supports an array of strings, a single string, or a dotted path like
`realm_access.roles`.
oidc_sync_user_groups_claim = "groups"
## Create Komodo User Groups found in OIDC claims when they do not exist.
## When false, only existing Komodo User Groups are synced.
oidc_sync_user_groups_auto_create = false
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/moghtech/komodo/pull/1491
**Author:** [@Asleep123](https://github.com/Asleep123)
**Created:** 6/21/2026
**Status:** 🔄 Open
**Base:** `main` ← **Head:** `oidc-group-sync`
---
### 📝 Commits (1)
- [`b64d457`](https://github.com/moghtech/komodo/commit/b64d457eeee38f8996432e5442a0e1d9b81e6c46) feat: add support for syncing OIDC claims with user groups
### 📊 Changes
**7 files changed** (+265 additions, -4 deletions)
<details>
<summary>View changed files</summary>
📝 `bin/core/src/auth/mod.rs` (+182 -3)
📝 `bin/core/src/config.rs` (+9 -0)
📝 `client/core/rs/src/entities/config/core.rs` (+38 -0)
📝 `client/core/rs/src/entities/user.rs` (+6 -0)
📝 `client/core/ts/src/types.ts` (+5 -0)
📝 `config/core.config.toml` (+20 -1)
📝 `ui/public/client/types.d.ts` (+5 -0)
</details>
### 📄 Description
Adds support to automatically add (and optionally create) user groups to users in Komodo using OIDC claim data.
This requires an update to the underlying auth server Komodo uses. Upon the merge of [this PR](https://github.com/moghtech/lib/pull/6), this PR will be updated with the new release version and undrafted.
Config shape:
```
## Sync Komodo User Group memberships from an OIDC claim on every OIDC login.
## Only memberships previously synced from OIDC are removed when claims change.
oidc_sync_user_groups = false
## OIDC claim used for User Group sync.
## Supports an array of strings, a single string, or a dotted path like
`realm_access.roles`.
oidc_sync_user_groups_claim = "groups"
## Create Komodo User Groups found in OIDC claims when they do not exist.
## When false, only existing Komodo User Groups are synced.
oidc_sync_user_groups_auto_create = false
```
Closes: #667, #1251
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/moghtech/komodo/pull/1491
Author: @Asleep123
Created: 6/21/2026
Status: 🔄 Open
Base:
main← Head:oidc-group-sync📝 Commits (1)
b64d457feat: add support for syncing OIDC claims with user groups📊 Changes
7 files changed (+265 additions, -4 deletions)
View changed files
📝
bin/core/src/auth/mod.rs(+182 -3)📝
bin/core/src/config.rs(+9 -0)📝
client/core/rs/src/entities/config/core.rs(+38 -0)📝
client/core/rs/src/entities/user.rs(+6 -0)📝
client/core/ts/src/types.ts(+5 -0)📝
config/core.config.toml(+20 -1)📝
ui/public/client/types.d.ts(+5 -0)📄 Description
Adds support to automatically add (and optionally create) user groups to users in Komodo using OIDC claim data.
This requires an update to the underlying auth server Komodo uses. Upon the merge of this PR, this PR will be updated with the new release version and undrafted.
Config shape:
Closes: #667, #1251
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.