User Sync Agent

[nikzen]

Description

This tool will connect to an onprem ldap. It will poll users and based on the status it will create or delete a zitadel user.

Topics for this epic:

• Create #1
• Allow binary/base64 attribute type inputs #3
• Make SSO support separate from the sync tool #4
• Implement LDAPS support #5
• Improve enable_value and disable_value status  #12
• Not all entry attributes end up being listed when run against AD #14
• Phone numbers should be optional #16
• Remove initialize passwordless from zitadel user create api call #23
• release: v0.2.0 #31
• Allow non-SSO deployments #30

Further details

https://www.notion.so/famedly/Famedly-Sync-Agent-a7e1167785d44393a29083e81bc43bf4#eb2f2f86933446d38d60428f2b818500

[tlater-famedly]

I took the freedom of splitting out supporting TLS into #5 - that way we can separately track that.

Most of the implementation will be done with #1 being merged.

[tlater-famedly]

Initial test against a real AD failed because of these issues:

• Allow binary/base64 attribute type inputs #3
• Not all entry attributes end up being listed when run against AD #14

The former should be quite easy to fix, but the latter is practically impossible at the moment because of #15

#12 is also likely to cause issues in real use, but the tool should at least be functional without that ticket being resolved.

#10 is also very problematic, because it holds up all PRs on this repo. We need to figure out what's actually going wrong there.

[tlater-famedly]

We no longer support SSO, this is tracked in #30

Other than that the tool should now be ready for deployment in environments that do want to use SSO. We should make a release, do some testing, and then see about how we deploy this.

[tlater-famedly]

Currently waiting to get to testing this; we're having trouble with the customer VPN, and are waiting for replies from them.