Skip to content

README.md

Latest commit

 

History

History
48 lines (31 loc) · 2 KB

README.md

File metadata and controls

48 lines (31 loc) · 2 KB

#snyk-sso-membership

A Go CLI tool executable for synchronizing Snyk Single Sign On (SSO) memberships of a provisioned SSO User from a source SSO domain to a destination SSO domain.

Users Memberships

A Snyk SSO is bound to a Snyk Group. Snyk SSO users could be provisioned with the same email name identifier across multiple domains associated with the SSO using a non custom mapping SSO setup at the Identity Provider. snyk-sso-membership identifies such existent duplicated Users and synchronizes the User Group and Org memberships across 2 domains with the same Role and list of Orgs.

Deleting SSO Users on Snyk

Deleting Snyk SSO Users on a specified domain is supported. This is catered for use cases of migration of a SSO domain to a new domain with subsequent removal of Snyk Users on the deprecated domain. These users are identified through their Snyk email property value matching the deprecated domain.

Getting started

To build snyk-sso-membership:

make build

Commands

Executing sync Users Membership

  • Specify Snyk groupID as an argument with domain and ssoDomain flags
snyk-sso-membership sync <groupID> --domain=source.com --ssoDomain=destination.com

This will synchronize Group and Org memberships of SSO Users on the source.com domain to their corresponding self on destination.com domain.

Deleting SSO Users

snyk-sso-membership delete-users <groupID> --domain=source.com
snyk-sso-membership delete-users <groupID> --email=User1@source.com
snyk-sso-membership delete-users <groupID> --email=User1@source.com,User2@source.com

Note

Default email notifications of e.g. Snyk detected vulnerabilities based on the subscribed Snyk Group and Org settings will be applied on Snyk SSO Users with synchronization of those memberships completed on the destination domain.

Deleting a SSO User will trigger an immediate "Your Snyk account was deleted" email to the Snyk SSO user on the specified domain or email addresses.