Unlocking the power of Single Sign-On with dynamic group provisioning, leveraging multiple group attributes for seamless access management

Unlocking the power of Single Sign-On with dynamic group provisioning, leveraging multiple group attributes for seamless access management

miniOrange x REWE Group

Background- REWE GROUP

The REWE Group is a German diversified retail and tourism co-operative group based in Cologne, Germany. REWE is one of Germany's leading food retail companies. It operates supermarkets, consumer stores, specialist stores, discount stores, drug stores, partner stores and online channels

Problem:

REWE Group was using our miniOrange OAuth Plugin for Single Sign functionality in Jira and Confluence. They wanted that all the groups that are coming in the token response of the end user must be assigned appropriately. miniOrange does provide a way of mapping the user to the groups coming from the Provider.
This is achieved by allowing the admin to map the group attribute inside the plugin, which serves as the primary key storing the user's groups. However, in their scenario, the token response for the user contained multiple such keys, each holding values for the groups.

Solution:

miniOrange performed an in-depth analysis to determine how to fulfill this requirement and diligently addressed their specific use case. As a result, we introduced a feature within our plugin that enables the mapping of multiple group attributes. With this enhancement, users can map any desired number of group attributes, and our plugin will retrieve all the groups contained within those keys, subsequently assigning them to the user.
Furthermore, there was an additional challenge to address: REWE Group desired to apply regex patterns to the mapped group attributes. Specifically, they requested that these regex patterns be applied individually to each mapped group attribute. This requirement entailed assigning only those groups to the user that matched the respective regex pattern.
miniOrange went above and beyond to accommodate this specific requirement, ensuring that the provision was implemented successfully. As a result, the solution worked seamlessly on their end, meeting their expectations precisely.

Additional Support:

  • Beyond addressing their use case, miniOrange provided ongoing assistance to REWE Group. This included getting on a call whenever they faced an issue with the SSO and solving it then and there.
  • Addressing all their concerns and optimizing the plugin solely for them so that no matter how many groups are to be assigned to the user, SSO is not delayed and Just In Time Provisioning works in no time.
  • Not only this, same provision was provided to them in Confluence as well.
  • REWE group was extremely happy with their use case getting sufficed and all their user’s groups were assigned appropriately.

The fruitful partnership between REWE GROUP and miniOrange highlights the power of customized solutions in overcoming unique challenges and fostering organizational achievements. Our dedication to providing tailored solutions that tackle our clients' specific obstacles and propel their success is unwavering. We take pride in our pivotal role in enhancing REWE GROUP's SSO functionality and eagerly anticipate supporting them in their future endeavors.



REWE Group

Your needs, Our solution:

Let's embark on a discovery call to explore how we can address your needs. Reach out to us at +1 978 658 9387 or email your inquiries to info@xecurify.com. We're eager to discuss how we can move forward together.