It's all about the answers!

Ask a question

How to assign user roles in IBMId OIDC


Vijay Parmar (11) | asked 19 hours ago

I am implementing OIDC based authentication for DOORS Classic product. In DOORS, user can be assigns some roles like Administrator.

In IBMId OIDC IDP, how we can assign roles to user ?

2 answers



permanent link
Ralph Schoon (63.6k33646) | answered 17 hours ago
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER
edited 17 hours ago

As far as I know JAS, OIDC etc, only do the authentication. They do not have anything to do with roles at all.
You need to understand what roles and repository roles are. See https://jazz.net/wiki/bin/view/Deployment/RTCProcessFundamentals

JAS/OIDC usually uses LDAP as system to store the user ID's and the mapping to the repository roles.
Roles are managed in project areas on the servers for the applications.

For the communication from DOORS, you would need the userID and password on the Jazz Servers, or you need to use OAuth.


permanent link
Davyd Norris (2.9k217) | answered 9 hours ago
Ralph is partially correct here - his answer was for DOORS Next and Jazz based products but you were asking about DOORS Classic. He is spot on in that OIDC/LDAP provides authentication and the basic user details and group membership - you then need to map the groups in the target product.

When you set up the Rational Directory Server in Corporate mode, it defers all authentication to your corporate LDAP, and the Users and Groups are retrieved by using the LDAP query parameters set up in RDS during the initial configuration. All these users and groups will then be visible in your RDS managed DOORS Classic server, and you then need to map the corporate groups to the user group types in DOORS.

If you already have DOORS set up stand alone, you can simplify the migration by exporting user and group information from the DOORS database, and then importing it into RDS.

This document might be useful:


Comments
Ralph Schoon commented 51 mins ago
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER

Thanks Davyd, as always, I appreciate your experience and desire to share it here on the forum!

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.