OpenID Connect User Backend - EntraID groups mapping

Hello all,

Have OpenID Connect user backend (6.1.2) working with EntraID for SSO user login - users can log in, their workspace is auto-provisioned, etc.

When we enable groups provisioning we can’t seem to get it working.

In EntraID we have created security groups that match the names of the groups in NextCloud. The user groups are also matched to similarly named group shares in NextCloud.

In Azure we have created a groups claim in the application token configuration, set it to security groups only, Group ID for ID/Access/SAML but our test user when logged out and back in never has a group mapped from EntraID to NextCloud.

In the OpenID Connect user backend we’ve used multiple forms of syntax for the groups mapping, nothing seems to work properly.

At this point we can create a user via GUID but not by any other means, groups matching in EntraID won’t be mapped to those in NextCloud - they will only be created by the EntraID GUID for the group.

Anyone using OpenID Connect User Backend?

Any assistance appreciated!

OpenID Connect User Backend allows mapping EntraID groups to user roles or permissions. This integration ensures seamless authentication and authorization by aligning EntraID group memberships with backend access controls.

1 Like