Allow SSO groups to be shared with the Node-RED Dashboard

A new flag has been added to the SAML SSO configuration to allow a user's group membership to be included in the profile information included when FlowFuse Authentication is used with the Node-RED Dashboard v2.

Shown here is the content of the _client object attached to messages generated by the Dashboard nodes.

{
    "user": {
        "username": "ben-example_com",
        "email": "ben@example.com",
        "image": "https://forge.example.com/avatar/YmVu",
        "name": "Ben",
        "userId": "r3VG59G85J",
        "role": "owner",
        "SSOGroups": [
            "FlowFuse",
            "ff-development-owner",
            "test_ff-development-owner_test"
        ]
    },
    "socketId": "NA7eDLuWbR6wmCpSAAAF",
    "socketIp": "192.168.1.56"
}

The new key SSOGroups includes the list of Groups passed to the SSO configuration by the SAML backend and can be used by the Dashboard to control what information is shown to the user.

More details about how to create mutli-user Node-RED Dashboards can be found here

SSO is available to Enterprise teams on FlowFuse Cloud. Contact support if you would like this feature to be enable for your team.