[OAK-9559] Migrate previously synced users/groups to dynamic membership

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.42.0
• Component/s: auth-external
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 25/Aug/21 15:48
• Updated: 12/Jan/22 13:44
• Resolved: 22/Oct/21 13:26

Description

if configuration option PARAM_USER_DYNAMIC_MEMBERSHIP_DEFAULT is enabled, any external identities that have been synchronized before will fall back to the original default sync behavior.

in order to provide consistent behavior for all synchronized users, oak-auth-external should provide some option to either migrate previously synchronized identities or force a re-sync to establish dynamic membership (and removed previously synced external groups).

Issue Links

• is related to: OAK-9599 Enforce dynamic membership upon user login
• links to: GitHub Pull Request #398