OpenId Connect not retrieving group names when connected to Azure AD

XMLWordPrintable

    • Type: Bug
    • Resolution: Unresolved
    • Priority: Major
    • Component/s: oic-auth-plugin
    • None
    • Environment:
      jenkins 2.500
      oic-auth 4.494.v6b_f419104767
      linux server

      OpenID connect Jenkins plugin issue
      If I use the oic-auth plugin I only get groupIDs when trying "jenkinsurl/whoAmI" If I use the Azure Jenkins plugin I am getting both GroupIDs and GroupNames. It seems like the open ID plugin is doing a side lookup on the user via Graph API and hence the group ID is returned instead of the group name. I need to use the openID connect plugin as that offers more flexibility in terms of keeping existing tokens when switching from LDAP to EntraID authentication Has anyone else experienced this?

      I am using "groups" for the groups field in the plugin configs. Do I need to use something else to be able to retrieve the group names?

      What works: Authentication works fine when using OpenID connect

      What doesn't work: Authorisation doesn't work as group names are not being retrieved.

            Assignee:
            Unassigned
            Reporter:
            Nelu
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: