Configuring Security Settings

Configuration of the security_settings.xml

The security_settings.xml file is used to define your Orchestra role mapping. To map the roles that a user is supposed to have in Orchestra, the roles need to be configured in your identity provider.

Configuration Authentication Type Mapping

Tag	Description
<authTypeMapping type="oauth">	Defines the authentication type for which the mapping should apply. Available types include oauth, ldap, and saml.
<group/>	name: the name of the group. description: a human-readable text that describes the purpose of this group.
<hasRoles/>	Contains a comma-separated list of all roles assigned to this group. If * is specified, all configured roles are assigned.
<isMemberOf/>	Contains a comma-separated list of all base groups assigned to this group. If * is specified, all configured base groups are assigned.
<canAccessScenariosInGroups/>	Contains a comma-separated list of all scenario groups or regular expressions that are accessible to this group.
	Sample regular expressions:
	- .*test.* – Matches the scenario group's name containing "test" (case-insensitive).
	- group_test.* – Matches the scenario group's name starting with "group_test" (case-insensitive).
<canAccessScenarios/>	Contains a comma-separated list of all scenarios or regular expressions that are accessible to this group.
	Sample regular expressions:
	- .*test.* – Matches the scenario's name containing "test" (case-insensitive).
	- sc_test.* – Matches the scenario's name starting with "sc_test" (case-insensitive).

Example

<oauthGroups>
    <group name="OrchestraAdmin" description="A full administration user for Orchestra">
        <hasRoles>*</hasRoles>
        <isMemberOf></isMemberOf>
        <canAccessScenariosInGroups></canAccessScenariosInGroups>
        <canAccessScenarios></canAccessScenarios>
    </group>
</oauthGroups>