AzureAD user will automatically be removed from Group if she/he log out

[iMilad (Milad Khakpour)]

Hi,

I have a group which users from it can access to projects with specific key patterns, so far so good, after adding user to the group, user can see the projects but the moment user logout and login again, then user is gone from the group immediately.

this happens to all the users, all of them are login via AzureAD.

AzureAD plugin version 1.2.0
SonarQube Developer Edition Version: 9.4.0.54424

any hint, why is like that? the only local user is admin

Best
Milad

[Colin]

Hey there.

Checkout this answer here.

Group persitence problem

Hey there. Are you also delegating authentication to an external identity provider like LDAP? As noted in the documentation on Delegated Authentication: When group mapping is configured, the delegated authentication source becomes the only place to manage group membership, and the user’s groups are re-fetched with each log in. Meaning that if you are manually managing group membership and have ldap.group.* parameters configured, group membership will be revoked for users upon login if that …

So you either need to:

• Turn off group sync for the Azure AD plugin (if you need help, probably best to ask the maintainer: GitHub - hkamel/sonar-auth-aad: Azure Active Directory Authentication for SonarQube)
• Make sure group information coming from Azure AD matches groups you have created in SonarQube