[Koha-bugs] [Bug 33538] New: Allow for independent shibboleth autocreate and sync mapping

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33538

            Bug ID: 33538
           Summary: Allow for independent shibboleth autocreate and sync
                    mapping
 Change sponsored?: ---
           Product: Koha
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P5 - low
         Component: Authentication
          Assignee: koha-bugs at lists.koha-community.org
          Reporter: pgsengstock at wisc.edu
        QA Contact: testopia at bugs.koha-community.org
                CC: dpavlin at rot13.org

Shibboleth auth's autocreate and sync functions both rely on the same
//shibboleth/mapping block in koha-conf.xml.  Because autocreate requires
mapping and/or defaults for branchcode and categorycode, this has the undesired
affect of overwriting manual edits to borrowers on later syncs if the those
fields are not delivered via shibboleth and explicitly mapped.  Example:

1) Patron signs in for first time and borrower account is autocreated with a
default branch and categorycode.
2) Staff update patron to set new branch and category codes as needed (e.g.
from "SSOAUTH" to "MAINLIB").
3) On next sign-in, patron's mapped data is synced, but branch and category
codes are overwritten with the defaults.

Suggested workaround is to differentiate //shibboleth/autocreatemapping vs
//shibboleth/syncmapping.  This allows greater control over which fields are
mapped for autocreate vs sync.  This schema change would not be backward
compatible, though.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.