API plugin used for compatibility check
Ligoj Identity plugin This a very complex plugin managing security constraints depending on the authorization of current user and are massively based on RBAC and delegates. Provides the following features :
- User, group and company management
- Scope of container (group and company) to name macro set of containers
- Delegates to user/group/company of a subset of current user depending on propagation constraints
- Activity export for a group
Dashboard features :
- Amount of users in the linked group
Related plugins:
| Parameter | Scope | Default | Note |
|---|---|---|---|
| service:id:user-display | Global | id |
Displayed username mode: id (login), mail (first attached mail, fallback id), mail-short (mail without the domain part), any user attribute name (firstName, lastName, company, ... — also resolved in the customAttributes map, fallback id), or an expression combining ${token} placeholders and literal text, e.g. ${firstName} ${lastName} (each token is one of the previous modes). Whenever the mode or a token cannot be resolved for a user (missing attribute, no mail), the displayed name is this user's visual identifier (service:id:visual-id-name, id by default). The ${...} placeholders are for the UI only: this value is forwarded raw, never resolved by Spring. |
| service:id:visual-id-name | Global | id |
Attribute displayed as the user's identifier in the UI (table first column, implicit sort): id, firstName, lastName, mail (first one), or customAttributes.<property> (looked up in SimpleUser#customAttributes). The visual-id sort key of UserOrgResource#findAll maps to this attribute; the LDAP repository sorts custom attributes with id fallback. |
| service:id:visual-id-label | Global | - | Static (non localizable) label displayed for the visual identifier column. When undefined, the UI localizes the visual-id-name value. |
| service:id:uid-pattern | Node, Subscription | .* |
Pattern determining the login is valid for an authentication. |
| service:id:ou | Node, Subscription | null |
Parent OU. |
| service:id:group | Node, Subscription | null |
Normalized Group name (CN). |
| service:id:parent-group | Node, Subscription | null |
Normalized parent Group name (CN). |