{"action":"created","issue":{"url":"https://api.github.com/repos/connectifier/jenkins-saml-plugin/issues/3","labels_url":"https://api.github.com/repos/connectifier/jenkins-saml-plugin/issues/3/labels{/name}","comments_url":"https://api.github.com/repos/connectifier/jenkins-saml-plugin/issues/3/comments","events_url":"https://api.github.com/repos/connectifier/jenkins-saml-plugin/issues/3/events","html_url":"https://github.com/connectifier/jenkins-saml-plugin/issues/3","id":50786139,"number":3,"title":"No group collection for authorization plugins","user":{"login":"jessejacob","id":2250131,"avatar_url":"https://avatars.githubusercontent.com/u/2250131?v=3","gravatar_id":"","url":"https://api.github.com/users/jessejacob","html_url":"https://github.com/jessejacob","followers_url":"https://api.github.com/users/jessejacob/followers","following_url":"https://api.github.com/users/jessejacob/following{/other_user}","gists_url":"https://api.github.com/users/jessejacob/gists{/gist_id}","starred_url":"https://api.github.com/users/jessejacob/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jessejacob/subscriptions","organizations_url":"https://api.github.com/users/jessejacob/orgs","repos_url":"https://api.github.com/users/jessejacob/repos","events_url":"https://api.github.com/users/jessejacob/events{/privacy}","received_events_url":"https://api.github.com/users/jessejacob/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2014-12-03T06:08:18Z","updated_at":"2015-05-05T14:41:21Z","closed_at":null,"body":"Issues aren't enabled on the other plugin repo, so I'm commenting here (also commented on the plugin page)\r\n\r\nI'm a SAML newbie, but I got the plugin working for basic authentication with the ADFS IdP after finding the ADFS readme in the pac4j repo. I already had a comprehensive [matrix authorization strategy](https://wiki.jenkins-ci.org/display/JENKINS/Matrix+Authorization+Strategy+Plugin) based on Active Directory groups from the Active Directory plugin, but there isn't any [metadata file](http://en.wikipedia.org/wiki/SAML_2.0#Assertion_Consumer_Service_Metadata) with your plugin to designate a mapping strategy to request group/role memberships from the IdP. Looking at how straight-forward your actual plugin code is, it looks like you engineered it for a simple authentication only as you hardcode an empty array of authorities.\r\n\r\nI would love to use this plugin, but I can't unless more work is done to implement granted authorities for the user based on group names coming back from the SAML response. Kohsuke wrote some great code for doing this using ADSI in the Active Directory plugin, I'm just light on exactly what I should ask my ADFS admin to provide and how to use pac4j to map it.\r\n\r\nI would love to help, but I've already got my hands full with software projects and implementing Jenkins at my company. I'm primarily a .NET developer, so I'm not even sure how I would setup a Java dev environment on Windows to help out...I've helped several other plugin developers debug Windows-specific issues with their plugins in the past, but I've yet to roll up my sleeves and work on a plugin. After looking at your code and the AD plugin it looks like something I could tackle though. If you have some pointers for me to get setup and be able to build your plugin I would seriously consider forking the repo and submitting a pull request after I get it working, but I would probably need some help with the actual SAML part like the ACSM. If this is something you might be able to help with if I have questions, I would love to extend the plugin in the near future to support authorization."},"comment":{"url":"https://api.github.com/repos/connectifier/jenkins-saml-plugin/issues/comments/99099926","html_url":"https://github.com/connectifier/jenkins-saml-plugin/issues/3#issuecomment-99099926","issue_url":"https://api.github.com/repos/connectifier/jenkins-saml-plugin/issues/3","id":99099926,"user":{"login":"antelmoa","id":12255284,"avatar_url":"https://avatars.githubusercontent.com/u/12255284?v=3","gravatar_id":"","url":"https://api.github.com/users/antelmoa","html_url":"https://github.com/antelmoa","followers_url":"https://api.github.com/users/antelmoa/followers","following_url":"https://api.github.com/users/antelmoa/following{/other_user}","gists_url":"https://api.github.com/users/antelmoa/gists{/gist_id}","starred_url":"https://api.github.com/users/antelmoa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/antelmoa/subscriptions","organizations_url":"https://api.github.com/users/antelmoa/orgs","repos_url":"https://api.github.com/users/antelmoa/repos","events_url":"https://api.github.com/users/antelmoa/events{/privacy}","received_events_url":"https://api.github.com/users/antelmoa/received_events","type":"User","site_admin":false},"created_at":"2015-05-05T14:41:21Z","updated_at":"2015-05-05T14:41:21Z","body":"@benmccann I am also another person interested in this functionality.  I would also be willing to help you with this, but would like to get some help on how to get started and how to debug the code.  I am planning on doing the development on Red Hat, but could try your development environment if it is straight forward to setup(I have not done much JAVA development).  Thanks!"}}