...
| aarc-white | aarc-yellow | aarc-blue | aarc-social | |
|---|---|---|---|---|
| white-normal | user | |||
| white-super | admin | |||
| yellow-normal | user | |||
| yellow-super | admin | |||
| blue-normal | user | |||
| blue-super | admin | |||
| social-normal | user | |||
| social-super | admin |
Here an example of the SAML assertion attribute provided by COmanage and that we are using for mapping the user:
| 'entitlement': 'urn:mace:aarc-project.eu:am03.pilots.aarc-project.eu:members:member@aarc-white.pilots.aarc-project.eu;urn:mace:aarc-project.eu:am03.pilots.aarc-project.eu:admin:member@aarc-white.pilots.aarc-project.eu' |
|---|
Since in the entitlement it is present the value "urn:mace:aarc-project.eu:am03.pilots.aarc-project.eu:admin:member@aarc-white.pilots.aarc-project.eu", the user that has got the admin role in the CO aarc-white.pilots.aarc-project.eu is mapped to the white-super group with the admin role in OpenStack
...