I have set up authentik as my identity provider, with auto provision, and set the default policy to the organisation name I set up with the admin account and default role as "Member".
I can connect with Authentik with a user account, however it always go the new organisation page and the user do not belong to any organisation. The user appears in the user root profile. I tried to add it in the organisation user with the same username but to no avail.
I have pangolin 1.4.0.
How can I fix this issue ?
Thank you
Originally created by @ermeneuei on GitHub (May 15, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/730
Hello,
I have set up authentik as my identity provider, with auto provision, and set the default policy to the organisation name I set up with the admin account and default role as "Member".
I can connect with Authentik with a user account, however it always go the new organisation page and the user do not belong to any organisation. The user appears in the user root profile. I tried to add it in the organisation user with the same username but to no avail.
I have pangolin 1.4.0.
How can I fix this issue ?
Thank you
This would assign all users with the authentik Admins Group the Admin role and everyone else the Member role
Organization Mapping Path (Optional) -> This defines whether or not an organization is "a match" with a user
contains(groups, 'Member')
This would match with all users that have the Member Group
If you combine these two options, all users with the Member Group in authentik will be added to the organization and if they additionally have the authentik Admins Group, they will be added to the Admin Group in Pangolin.
<!-- gh-comment-id:2884616382 -->
@felixmertins commented on GitHub (May 15, 2025):
**Be careful, in this setup we are using Authentik groups not roles, since roles are not included in the userinfo.**
Have you added an organization policy to your IdP?
1. Go to Identity Providers and edit your IdP
2. Go to organization policies and create a new one.
3. Select your Organization.
Role Mapping Path (Optional) -> this assigns a role to someone and "adds" them to an organization
`contains(groups, 'authentik Admins') && 'Admin' || 'Member'`
This would assign all users with the authentik Admins Group the Admin role and everyone else the Member role
Organization Mapping Path (Optional) -> This defines whether or not an organization is "a match" with a user
`contains(groups, 'Member')`
This would match with all users that have the Member Group
If you combine these two options, all users with the Member Group in authentik will be added to the organization and if they additionally have the authentik Admins Group, they will be added to the Admin Group in Pangolin.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @ermeneuei on GitHub (May 15, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/730
Hello,
I have set up authentik as my identity provider, with auto provision, and set the default policy to the organisation name I set up with the admin account and default role as "Member".
I can connect with Authentik with a user account, however it always go the new organisation page and the user do not belong to any organisation. The user appears in the user root profile. I tried to add it in the organisation user with the same username but to no avail.
I have pangolin 1.4.0.
How can I fix this issue ?
Thank you
@felixmertins commented on GitHub (May 15, 2025):
Be careful, in this setup we are using Authentik groups not roles, since roles are not included in the userinfo.
Have you added an organization policy to your IdP?
Go to Identity Providers and edit your IdP
Go to organization policies and create a new one.
Select your Organization.
Role Mapping Path (Optional) -> this assigns a role to someone and "adds" them to an organization
contains(groups, 'authentik Admins') && 'Admin' || 'Member'This would assign all users with the authentik Admins Group the Admin role and everyone else the Member role
Organization Mapping Path (Optional) -> This defines whether or not an organization is "a match" with a user
contains(groups, 'Member')This would match with all users that have the Member Group
If you combine these two options, all users with the Member Group in authentik will be added to the organization and if they additionally have the authentik Admins Group, they will be added to the Admin Group in Pangolin.
@jakesie1309 commented on GitHub (May 15, 2025):
reload and working ,we can close this one
@ermeneuei commented on GitHub (May 15, 2025):
I works thank you !!