Skip to content

Commit

Permalink
Merge pull request #6027 from logto-io/gao-update-changeset
Browse files Browse the repository at this point in the history
chore: update changeset
  • Loading branch information
gao-sun committed Jun 17, 2024
2 parents 59fe21a + aefe5cb commit 4118669
Show file tree
Hide file tree
Showing 3 changed files with 27 additions and 10 deletions.
27 changes: 22 additions & 5 deletions .changeset/smart-laws-compare.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,13 +8,30 @@

feature: just-in-time user provisioning for organizations

This feature allows organizations to provision users when signing up with their email address or being added by Management API. If the user's email domain matches one of the organization's configured domains, the user will be automatically provisioned to the organization.
This feature allows organizations to provision users when signing up with their email address or being added by Management API.

### Email domains

If the user's verified email domain matches one of the organization's configured domains, the user will be automatically provisioned to the organization.

To enable this feature, you can add email domain via the Management API or the Logto Console:

- We added the following new endpoints to the Management API:
- `GET /organizations/{organizationId}/email-domains`
- `POST /organizations/{organizationId}/email-domains`
- `PUT /organizations/{organizationId}/email-domains`
- `DELETE /organizations/{organizationId}/email-domains/{emailDomain}`
- `GET /organizations/{organizationId}/jit/email-domains`
- `POST /organizations/{organizationId}/jit/email-domains`
- `PUT /organizations/{organizationId}/jit/email-domains`
- `DELETE /organizations/{organizationId}/jit/email-domains/{emailDomain}`
- In the Logto Console, you can manage email domains in the organization details page -> "Just-in-time provisioning" section.

### Default organization roles

You can also configure the default roles for users provisioned via this feature. The default roles will be assigned to the user when they are provisioned.

To enable this feature, you can set the default roles via the Management API or the Logto Console:

- We added the following new endpoints to the Management API:
- `GET /organizations/{organizationId}/jit/roles`
- `POST /organizations/{organizationId}/jit/roles`
- `PUT /organizations/{organizationId}/jit/roles`
- `DELETE /organizations/{organizationId}/jit/roles/{organizationRoleId}`
- In the Logto Console, you can manage default roles in the organization details page -> "Just-in-time provisioning" section.
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
"paths": {
"/api/organizations/{id}/jit/roles": {
"get": {
"summary": "Get organization JIT roles",
"summary": "Get organization JIT default roles",
"description": "Get organization roles that will be assigned to users during just-in-time provisioning.",
"responses": {
"200": {
Expand All @@ -16,7 +16,7 @@
}
},
"post": {
"summary": "Add organization JIT roles",
"summary": "Add organization JIT default roles",
"description": "Add new organization roles that will be assigned to users during just-in-time provisioning.",
"requestBody": {
"content": {
Expand All @@ -41,7 +41,7 @@
}
},
"put": {
"summary": "Replace organization JIT roles",
"summary": "Replace organization JIT default roles",
"description": "Replace all organization roles that will be assigned to users during just-in-time provisioning with the given data.",
"requestBody": {
"content": {
Expand All @@ -65,7 +65,7 @@
},
"/api/organizations/{id}/jit/roles/{organizationRoleId}": {
"delete": {
"summary": "Remove organization JIT role",
"summary": "Remove organization JIT default role",
"description": "Remove an organization role that will be assigned to users during just-in-time provisioning.",
"responses": {
"204": {
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ const organization_details = {
jit: {
title: 'Enable just-in-time provisioning',
description:
'Users can automatically join the organization and receive role assignments if their email matches specific domains, either during sign-up or when added via the Management API.',
'Users can automatically join the organization and receive role assignments if their verified email matches specific domains, either during sign-up or when added via the Management API.',
email_domains: 'JIT provisioning email domains',
email_domains_placeholder: 'Enter email domains for just-in-time provisioning',
invalid_domain: 'Invalid domain',
Expand Down

0 comments on commit 4118669

Please sign in to comment.