Skip to content

Prevent Groups Sync Service from removing top level members

Drew Blessing requested to merge dblessing_saml_avoid_managing_all_groups into master

What does this MR do and why?

Describe in detail what your merge request does and why.

I believe this behavior was originally added in anticipation of the way self-managed SAML Group Sync would utilize the service. However, that usage never came to be in the self-managed implementation. What we then found was if the only Group Link that was present was the top level and the user was not in that group, the member would be removed. This is not desired behavior, as the member should always remain at the top level for SaaS. This change fixes that behavior.

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Drew Blessing

Merge request reports