Closed
Description
an enterprise customer recently configured group sync with AD. they have 1000s of groups. currently, to configure group sync for a group of users in Coder, they have to:
- manually create the group in Coder
- update the
OIDC_GROUP_MAPPING
env var & update Coder
this process is sufficient for a small POC, but they provided feedback that this will be cumbersome for tens to hundreds of groups expected to sync with Coder. they suggested the default group name be group ID passed in from the IdP (they'd update the name as a later step). this would also allow a one-time setting of the OIDC_GROUP_MAPPING
var to the pre-defined IDs > group names.