- Issue created by @mstrelan
Automatically closed - issue fixed for 2 weeks with no activity.
This was originally reported on security.drupal.org but was deemed ok to discuss in public.
The module has an option to map "groups" from an external system (e.g. Okta) to Drupal roles. When the user logs in, Okta returns a list of groups the user is assigned to. If any of these are mapped to Drupal roles, the user is assigned that role in Drupal. Similarly, if the user already has a role that is mapped to a group, but Okta reports that the user no longer has that group, then the role is removed from the user.
This works as expected until the user has no groups. The expectation would be that all mapped roles would be removed from the user, but instead they retain all roles they previously had.
Evaluate roles regardless of if the userinfo response contains the groups array.
Active
3.0
Code
Automatically closed - issue fixed for 2 weeks with no activity.