Hello @gmesaper ,
To simplify, there’s two points that have to be accounted:
-
We import from the old rules to the new ones by parsing as follows: "if the rule is NOT
egroups
, we discard it as it is not supported under the new SSO, after which, we can only parse groups that are fully given, so if you had a rule for “~=drupal-admins”, we will try using justdrupal-admins
, however groups such asdrupal-admins-gmesaper
will not work and you will have to add it manually. -
New rules can be formed by going to application-portal.web.cern.ch/ , then to the specific application, and on the roles you can change them, there’s documentation here to guide you:
You can follow the full flow either (the way the guide explains).