Bug 1390692

Summary: ⁠9.2. USING IDENTITY MANAGEMENT - missing IdM group mapping instructions
Product: Red Hat Satellite Reporter: Ian Tewksbury <itewksbu>
Component: DocumentationAssignee: Sergei Petrosian <spetrosi>
Status: CLOSED NOTABUG QA Contact: Melanie Corr <mcorr>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.2.3CC: adahms, dvoss, smeyer, swadeley
Target Milestone: Unspecified   
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-05-17 11:12:58 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Ian Tewksbury 2016-11-01 16:51:12 UTC 
Document URL: 

https://access.redhat.com/documentation/en/red-hat-satellite/6.2/single/server-administration-guide/#sect-Red_Hat_Satellite-Server_Administration_Guide-Configuring_External_Authentication-Using_Identity_Management

Section Number and Name: 

⁠9.2. USING IDENTITY MANAGEMENT

Describe the issue: 

Missing instructions for how to set up groups between IdM and Satellite 6

Suggestions for improvement: 

Need a section going over how to map IdM groups to Satellite 6 groups when Satellite 6 is configured to use IdM.

Additional information: 

I figured out that if I created a group in IdM and then created a group in Satellite 6 and added an "External group" to the Satellite 6 group that mapped to the IdM group then authorization seems to work as expected.

I could not find instructions along those lines anywhere in the documentation. If it is somewhere it isn't where I expect it in section 9.2.

Also if there were any instructions for setting what the "default group" in satellite is for any IdM registered user that would be useful as well.
Comment 1 Stephen Wadeley 2017-06-02 14:05:57 UTC 
Hello Stefan

Is this something you have experience with?


Thank you
Comment 4 Andrew Dahms 2018-12-04 13:03:07 UTC 
Returning to the default assignee to be re-triaged as the schedule allows.
Comment 9 Sergei Petrosian 2019-05-17 11:12:58 UTC 
The following section that is now live in 6.5 Administering guide covers the request of this ticket:
13.4. Configuring External User Groups:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.5/html/administering_red_hat_satellite/chap-red_hat_satellite-administering_red_hat_satellite-configuring_external_authentication#sect-Red_Hat_Satellite-Administering_Red_Hat_Satellite-Creating_User_Groups-Configuring_External_User_Groups