Integrating Organization Directory for Users but Managing Groups Locally in Camunda 7 (Spring Project)

Camunda 7 Topics
1

Hi everyone,

I’m new to Camunda and currently working on migrating our workflow system from jBPM to Camunda 7, using a Spring-based project.

In our setup, we use our organization’s directory (e.g., LDAP Directory) for managing user entitlements. I would like to sync users from our organization directory into Camunda, but at the same time, I want to manage groups locally within Camunda — meaning that the groups I create in Camunda should not be synced or overridden by the organization directory.

Is this kind of setup possible in Camunda 7? If so, could you please guide me on how to configure this properly in a Spring application?

2

Hi @reddyn564 and welcome.

This is not supported out of the box, but you can implement that yourself using the IdentityProvider interface.
See here for documentation:

And e.g. the OAuth2IdentityProvider already implements the db identity provider as a fallback:

3

Hi Camunda Team,
I’m currently trying out the solution mentioned above. Looking ahead, if we plan to migrate to Camunda 8 in the near future, could you please confirm whether this feature is also available there?

Thank you!

4

Hi @reddyn564.

In Camunda8 the identity component takes care of authentication and authorization.

As such it’s based on an OIDC flow for authentication and can e.g. connect to a keycloak instance (or another OIDC provider).

5

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.