Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-75645

OpenId Connect not retrieving group names when connected to Azure AD

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • oic-auth-plugin
    • None
    • jenkins 2.500
      oic-auth 4.494.v6b_f419104767
      linux server

      OpenID connect Jenkins plugin issue
      If I use the oic-auth plugin I only get groupIDs when trying "jenkinsurl/whoAmI" If I use the Azure Jenkins plugin I am getting both GroupIDs and GroupNames. It seems like the open ID plugin is doing a side lookup on the user via Graph API and hence the group ID is returned instead of the group name. I need to use the openID connect plugin as that offers more flexibility in terms of keeping existing tokens when switching from LDAP to EntraID authentication Has anyone else experienced this?

      I am using "groups" for the groups field in the plugin configs. Do I need to use something else to be able to retrieve the group names?

      What works: Authentication works fine when using OpenID connect

      What doesn't work: Authorisation doesn't work as group names are not being retrieved.

            Unassigned Unassigned
            nelu_vasilica Nelu
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: