Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
Red Hat Satellite engineering is moving the tracking of its product development work on Satellite to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "Satellite project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs will be migrated starting at the end of May. If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "Satellite project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/SAT-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1390692

Summary: ⁠9.2. USING IDENTITY MANAGEMENT - missing IdM group mapping instructions
Product: Red Hat Satellite Reporter: Ian Tewksbury <itewksbu>
Component: DocumentationAssignee: Sergei Petrosian <spetrosi>
Status: CLOSED NOTABUG QA Contact: Melanie Corr <mcorr>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.2.3CC: adahms, dvoss, smeyer, swadeley
Target Milestone: Unspecified   
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-05-17 11:12:58 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Ian Tewksbury 2016-11-01 16:51:12 UTC 
Document URL: 

https://access.redhat.com/documentation/en/red-hat-satellite/6.2/single/server-administration-guide/#sect-Red_Hat_Satellite-Server_Administration_Guide-Configuring_External_Authentication-Using_Identity_Management

Section Number and Name: 

⁠9.2. USING IDENTITY MANAGEMENT

Describe the issue: 

Missing instructions for how to set up groups between IdM and Satellite 6

Suggestions for improvement: 

Need a section going over how to map IdM groups to Satellite 6 groups when Satellite 6 is configured to use IdM.

Additional information: 

I figured out that if I created a group in IdM and then created a group in Satellite 6 and added an "External group" to the Satellite 6 group that mapped to the IdM group then authorization seems to work as expected.

I could not find instructions along those lines anywhere in the documentation. If it is somewhere it isn't where I expect it in section 9.2.

Also if there were any instructions for setting what the "default group" in satellite is for any IdM registered user that would be useful as well.
Comment 1 Stephen Wadeley 2017-06-02 14:05:57 UTC 
Hello Stefan

Is this something you have experience with?


Thank you
Comment 4 Andrew Dahms 2018-12-04 13:03:07 UTC 
Returning to the default assignee to be re-triaged as the schedule allows.
Comment 9 Sergei Petrosian 2019-05-17 11:12:58 UTC 
The following section that is now live in 6.5 Administering guide covers the request of this ticket:
13.4. Configuring External User Groups:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.5/html/administering_red_hat_satellite/chap-red_hat_satellite-administering_red_hat_satellite-configuring_external_authentication#sect-Red_Hat_Satellite-Administering_Red_Hat_Satellite-Creating_User_Groups-Configuring_External_User_Groups