Re: [Unity-idm-discuss] Setting up group membership request in account update tab

[Krzysztof B. <kb...@un...>]

Hi Sander,

W dniu 18.08.2021 o 08:44, Sander Apweiler pisze:
> Good morning all,
> we stock in another problem. The users are not added to the group. The
> problem here is the missing addToGroup statement in the automation tab.
> But is there also an action to self removal from the group?

Let me first confirm I understand your scenario. So you are trying to 
setup an enquiry, visible in user's home endpoint, where users can 
either join or leave some groups?

If that's the case then first of all I'm not sure if you need addToGroup 
in automation. The groups should be updated automatically after the 
enquiry request is accepted. So maybe you just need one automation 
action to auto-accept the enquiry? Without that each enquiry needs to be 
manually accepted by an admin.

The second part is about leaving. As of now Unity doesn't support via 
the enquiry form leaving groups (as well as removing attributes or 
dropping identities or credentials). This would be a new feature that we 
would need to design first. Perhaps would need a "sync" mode for a 
multi-selectable group. I.e. in such 'sync' mode unity would take all 
groups matching a group wildcard, and add/remove membership in those 
groups to match the selected ones.

Cheers,
Krzysztof