Restrict external auth to memberof group

[jkenyon]

On the fly authentication with external auth (e.g. Active Directory) allows for a users profile to be automatically imported if the user authenticates successfully.

In addition to a successful authentication, it would be great if this process could also check if the user is a member of a security group (e.g. "LogicalDOC Users") before creating a profile. This would make managing access from Active Directory much easier.

[jkenyon]

Basically we have ability to define a class, base and attribute for both User and Group. The ability to define a filter both user and group is whats required.

[car031]

ok.
do you want us to add a filter field?
You could write in the filter a comma-separated list of group the simple names like Group A, Group B

So a user is authenticated only if it belongs to one of those groups.
Do you also want us to put similar filter for the usernames ?

[jkenyon]

Yes correct, a filter field so a user is only authenticated if it belongs to one of the groups specified.

Having a similar filter for usersnames allows for more flexible configuration, so if you can add this too it could be useful.