Merge pull request #10 from pv2b/patch-1

Enable IdP to manage group memberships after initial user creation
pitbulk · Oct 14, 2019 · 6161c73 · 6161c73
2 parents 84c314d + a1305d6
commit 6161c73
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/authsaml/auth.php b/authsaml/auth.php
@@ -37,6 +37,7 @@ public function __construct()
 
         // $this->cando['external'] = true;
 
+        $this->cando['modGroups'] = true;
         $this->cando['external'] = true;
         $this->cando['logoff'] = true;
         $this->success = true;

diff --git a/authsaml/saml.php b/authsaml/saml.php
@@ -369,8 +369,8 @@ public function modifyUser($username, $changes) {
             $userinfo[$field] = $value;
         }
 
-        $groups   = join(',', $userinfo['grps']);
-        $groups   = array_map('urlencode', $groups);
+        $groups   = array_map('urlencode', $userinfo['grps']);
+        $groups   = join(',', $groups);
 
         $userline = join(':', array($newuser, $userinfo['name'], $userinfo['mail'], $groups))."\n";