Custom Group Mapping

[FingerlessGlov3s]

I saw in https://github.com/rustdesk/rustdesk-server-pro/releases/tag/1.6.7 that group mapping for okta/azure was added but it doesn't say how they map I assume it's based on the group names in Rustdesk Console matching the Azure Groups. If that's the case would it be possible to add an OIDC group name field when you edit a group, so say "Rustdesk-ServiceDesk" in azure can map to "Service Desk" in Rustdesk for example.

[rustdesk]

It uses groups returned from the okta/azure/github/keycloak (google does not support this) id token claim. If num(groups) > 1, only use the last group since we do not support multiple groups for the user. This applies to new user (the first time log-in) only.

[FingerlessGlov3s]

Which last group? the last one in the list from the OIDC or the last group it seems that also matches a Rustdesk group?

Also would my idea of a custom property for group matching be possible in the future?

[rustdesk]

If the group (last one) does not exist, it will create a group in rustdesk groups.

[FingerlessGlov3s]

Oh, I'll be turning that off, our users have loads of groups assigned to them. The last one will be different for each person, depends how Entra wants to enumerate them, not the wanted rustdesk purpose groups

[johannes-wm]

I was hoping that the mapping did not auto created groups, and only mapped to existing groups in rustdesk. But I was suprised when all the user groups was created, and found this discussion. Could you have an option for only sync to existing rust-desk groups, and not create groups?

[johannes-wm]

@rustdesk Could you have an option that prevent oidc to create rustdesk-group and sync only to existing rust-desk groups?