By: Ezequiel Sandoval user 04 Jun 2016 at 4:51 p.m. CDT

2 Responses
Ezequiel Sandoval gravatar
Hi Community! I am trying to find a way to create a new 'user type' (system has admin and user only). I need a kind of account with access to 'Users' menu operations in GUI. But this user should not do any technical operations (like change configuration or scripting). Can you help me with this? what would be the best approach to resolve this problem? if any one has an example about this, would be very very appreciated!!!

By Michael Schwartz Account Admin 04 Jun 2016 at 5:14 p.m. CDT

Michael Schwartz gravatar
oxTrust was designed to be a tool for admins--not really a delegated administration tool. There are some basic user features, but to be honest, we don't really encourage usage of oxTrust as a user facing application. To accomplish what you're asking, you'd have to do some pretty heavy java programming, implement new dynamic rules in Jboss Seam, and then implement those rules in the UI. Not a recommended activity... and certainly not something that we can support on the forums. A better path might be to write a standalone application that calls the SCIM API's or even the LDAP API's with just the data that you want to expose. And make that new application an openid connect relying party (so authn can be handled by the Gluu Server). Good luck! Sorry oxTrust is not what you're looking for! - Mike

By Ezequiel Sandoval user 04 Jun 2016 at 5:21 p.m. CDT

Ezequiel Sandoval gravatar
Thank you Michael!! I will take your recommendations.