[OAK-9663] Configuration option for allowed system-principals in ExternalPrincipalConfiguration

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.44.0
• Component/s: auth-external
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 12/Jan/22 08:56
• Updated: 15/Jul/22 14:53
• Resolved: 14/Jan/22 09:10

Description

today writing the protected properties rep:externalId and rep:externalPrincipalNames is limited to the internal system subject (containing SystemPrincipal). an additional configuration option should allow to extend this to additional {{SystemUserPrincipal}}s i.e. still preventing regular sessions from altering the protected properties.

Issue Links

• links to: GitHub Pull Request #458