Skip to content

Add resource to import users from IDP (LDAP, OIDC) #106

@adambarreiro

Description

@adambarreiro

There should be a new resource, apart from vcfa_org_local_user, to import users from LDAP.

Workaround is to import them manually:

basic_auth="$(echo -n "$vcfa_username@System:$vcfa_password" | base64)"
token="$(curl -s --insecure -X POST --url "$vcfa_endpoint/cloudapi/1.0.0/sessions/provider" \
--header 'Accept: application/json;version=39.2' --header "Authorization: Basic $basic_auth" -D - | grep -i x-vmware-vcloud-access-token | cut -d' ' -f 2 | tr -d '\r')"

tenant_context="$(cd $vcfa_folder && terraform output -raw org_id | cut -d':' -f 4)"

role_id="$(cd $vcfa_folder && terraform output -raw org_admin_role_id)"

for ldap_user in "${LDAP_USERS[@]}"; do
  result="$(curl -s --insecure -X POST --url "$vcfa_endpoint/cloudapi/1.0.0/users" \
--header 'Accept: application/*;version=41.0.0-alpha' --header 'Content-Type: application/json' \
--header 'x-vmware-vcloud-auth-context: my-org' --header "x-vmware-vcloud-tenant-context: $tenant_context" \
--header "Authorization: Bearer $token" \
--data "{
  \"username\": \"$ldap_user\",
  \"enabled\": true,
  \"roleEntityRefs\": [{
    \"id\": \"$role_id\",
    \"name\": \"Organization Administrator\"
  }],
  \"inheritGroupRoles\": true,
  \"providerType\": \"LDAP\"
}")"

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions