ShelfSSOGroupSync
Defined in: packages/auth/src/engine.ts:163
IdP group sync for one SSO provider (site role + project memberships).
Properties
Section titled “Properties”admins?
Section titled “admins?”
optionaladmins?:string[]
Defined in: packages/auth/src/engine.ts:175
Exact group names granting the site admin role. Full reconcile:
members not matched reset to member on every SSO sign-in.
Defaults to none (roles untouched).
claim?
Section titled “claim?”
optionalclaim?:string|string[]
Defined in: packages/auth/src/engine.ts:169
Claim (OIDC) or attribute (SAML) name(s) carrying group memberships.
First hit wins across names; arrays pass through, a lone string counts
as one group (never whitespace-split). Defaults to ["groups"].