Map OIDC roles/groups to weblate groups

[sebastianbuechler]

Describe the problem

Weblate has already an extensive role-based access management. However, it seems that currently it's not possible to map roles or groups coming from an OIDC provider to internal ones.

Describe the solution you would like

Other tools with OIDC provide the functionality of mappers like for example here in the ArgoCD documentation: https://argo-cd.readthedocs.io/en/stable/operator-manual/user-management/zitadel/#argocd-rbac-cmyaml and https://argo-cd.readthedocs.io/en/stable/operator-manual/rbac/#policy-csv-composition

It should have a configuration option to specify relations between a role/group of OIDC so on registration (and maybe even on subsequent logins) the user will get the corresponding weblate group automatically.

Also, an option should be considered that if no role is matched the access should be prevented.

Describe alternatives you have considered

No response

Screenshots

No response

Additional context

No response

[github-actions]

This issue has been added to the backlog. It is not scheduled on the Weblate roadmap, but it eventually might be implemented.

In case you need this feature soon, please consider helping or push it by funding the development.