Can Graylog user roles be regulated by OIDC identity providers?

Hello

By the looks of OIDC documentation, all users authenticated with an OIDC identity provider get the same set of roles defined in “Default Roles” field of “Edit OIDC Authentication Service” form. Is that correct?

Or is there a way to make Graylog use roles assigned to the user by the identity provider? For example, if you log in to Grafana with an IdP, the app reads role from a field on id_token and gives the user corresponding permissions.

Thanks.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.