I know this has been discussed before with the provisioning of roles to groups, but what about simply mapping to an multivalue attribute. Currently, the Field Roles doesn't seem to do much of anything when provisioning to LDAP (the field has target_id not value). Would it make sense to add an exception to a map this field? Just as a real quick example:
LdapUserProcessor.php
if ($ldapAttributeName == 'dn' && $value) {
$ldapUserEntry['dn'] = $value;
}
elseif($field_detail['user_attr'] == '[field.roles]') {
$roles = $account->getRoles();
$ldapUserEntry[$ldapAttributeName] = [];
foreach($roles as $key => $value) {
$ldapUserEntry[$ldapAttributeName][$key] = $value;
}
}
Otherwise, i'm not sure how to store Drupal roles in LDAP other than maybe writing a hook for ldap_entry_pre_provision_alter.
Closed: duplicate
4.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
There are two other issues. One addresses multi-value fields, and the other addresses entity references. I think it makes sense to address them as separate requests, and patches have been submitted on the other issues.
✨
Support entity references on synchronization
Needs work
#3024428: Support multi-value mappings →