Allow Migrating Auth Provider to OpenID
Currently, only migration to SAML and LDAP is supported via the mmctl user migrate-auth command. It would be great to have openid as an option too.
My current Enterprise setup uses Gitlab SSO, however I'd like to migrate all user authentication to Keycloak OIDC, but unable to do so due to this shortcoming. While hooking up Mattermost to Keycloak works, it refuses login as identities overlap in Gitlab and Keycloak. Therefore mmctl user migrate-auth should be able to update the Mattermost Postgres to change auth providers to openid/oidc.
3
votes