diff --git a/kanidm-setup.sh b/kanidm-setup.sh index c101313..ee031c1 100755 --- a/kanidm-setup.sh +++ b/kanidm-setup.sh @@ -22,14 +22,14 @@ $K system oauth2 add-redirect-url $C "https://$PORTAL_HOST/auth/callback" || tru # The desk groups: every group the content gates a directory on. Keep # this list equal to the `qualifies` values under questions/. has_group tomtervel_members || $K group create tomtervel_members -for g in kasserer styret trafikkomite lekeplasskomite arrangementskomite nabohjelp komiteer; do +for g in kasserer styret komiteer nabohjelp arrangementer elvesti horingsinstans lekeplasser miljogate pendlerforhold trafikk; do has_group tomtervel_$g || $K group create tomtervel_$g $K group add-members tomtervel_members tomtervel_$g done # Portal asks for openid, profile and email; groups arrive as a claim. $K system oauth2 update-scope-map $C tomtervel_members openid profile email -for g in kasserer styret trafikkomite lekeplasskomite arrangementskomite nabohjelp komiteer; do +for g in kasserer styret komiteer nabohjelp arrangementer elvesti horingsinstans lekeplasser miljogate pendlerforhold trafikk; do $K system oauth2 update-claim-map $C groups tomtervel_$g $g done $K system oauth2 update-claim-map-join $C groups array