@yuuvis/user-management-app 2.0.3 → 2.1.0

package/lib/assets/i18n/de.json

@@ -4,6 +4,8 @@
 	"yuv.app.user-management.navigation.groups.tooltip": "Zur Gruppenansicht wechseln",
 	"yuv.app.user-management.navigation.users.label": "Benutzer",
 	"yuv.app.user-management.navigation.users.tooltip": "Zur Benutzeransicht wechseln",
+	"yuv.app.user-management.navigation.settings.label": "Einstellungen",
+	"yuv.app.user-management.navigation.settings.tooltip": "Identity-Provider-Einstellungen anzeigen",
 	"yuv.app.user-management.group.action.create.success": "Die Gruppe wurde erfolgreich erstellt.",
 	"yuv.app.user-management.groups.action.button.cancel": "Abbrechen",
 	"yuv.app.user-management.groups.action.button.create": "Erstellen",
@@ -20,6 +22,7 @@
 	"yuv.app.user-management.groups.action.edit.success": "Die Gruppe '{{name}}' wurde erfolgreich bearbeitet.",
 	"yuv.app.user-management.groups.details.empty": "Keine Gruppe ausgewählt",
 	"yuv.app.user-management.groups.details.title": "Gruppeninformationen",
+	"yuv.app.user-management.groups.navigation.pagination.aria": "Seite auswählen",
 	"yuv.app.user-management.groups.navigation.refresh.tooltip": "Aktualisieren",
 	"yuv.app.user-management.groups.object.property.description": "Beschreibung",
 	"yuv.app.user-management.groups.object.property.id": "ID",
@@ -27,6 +30,33 @@
 	"yuv.app.user-management.groups.object.property.name": "Name",
 	"yuv.app.user-management.groups.object.property.roles": "Rollen",
 	"yuv.app.user-management.groups.title": "Gruppenübersicht",
+	"yuv.app.user-management.settings.action.button.close": "Schließen",
+	"yuv.app.user-management.settings.action.button.configure": "Jetzt konfigurieren",
+	"yuv.app.user-management.settings.dialog.title": "Identity-Provider (OIDC)",
+	"yuv.app.user-management.settings.oidc.action.copy.error": "Konnte nicht in die Zwischenablage kopiert werden. Bitte manuell kopieren.",
+	"yuv.app.user-management.settings.oidc.action.copy.label": "In die Zwischenablage kopieren",
+	"yuv.app.user-management.settings.oidc.action.copy.success": "In die Zwischenablage kopiert.",
+	"yuv.app.user-management.settings.oidc.action.delete.confirm.message": "Möchtest du die OIDC-Identity-Provider-Konfiguration wirklich löschen? Diese Aktion kann nicht rückgängig gemacht werden.",
+	"yuv.app.user-management.settings.oidc.action.delete.error": "Die OIDC-Identity-Provider-Konfiguration konnte nicht gelöscht werden.",
+	"yuv.app.user-management.settings.oidc.action.delete.label": "Konfiguration löschen",
+	"yuv.app.user-management.settings.oidc.action.delete.success": "Die OIDC-Identity-Provider-Konfiguration wurde erfolgreich gelöscht.",
+	"yuv.app.user-management.settings.oidc.action.update.error": "Das Client-Secret konnte nicht aktualisiert werden.",
+	"yuv.app.user-management.settings.oidc.action.update.label": "Aktualisieren",
+	"yuv.app.user-management.settings.oidc.action.update.success": "Das Client-Secret wurde erfolgreich aktualisiert.",
+	"yuv.app.user-management.settings.oidc.configure.error.discovery": "Die OIDC-Endpunkte konnten nicht über die Discovery-URL ermittelt werden. Bitte überprüfe die Discovery-URL.",
+	"yuv.app.user-management.settings.oidc.configure.error.unknown": "Der OIDC-Identity-Provider konnte aufgrund eines unbekannten Fehlers nicht konfiguriert werden. Bitte überprüfe die Eingaben und versuche es erneut.",
+	"yuv.app.user-management.settings.oidc.configure.property.clientSecret": "Client-Secret",
+	"yuv.app.user-management.settings.oidc.configure.property.discoveryUrl": "Discovery-URL",
+	"yuv.app.user-management.settings.oidc.error.unknown": "Die OIDC-Identity-Provider-Konfiguration konnte aufgrund eines unbekannten Fehlers nicht geladen werden. Bitte versuche es später erneut.",
+	"yuv.app.user-management.settings.oidc.notConfigured": "Für diesen Mandanten ist kein externer OIDC-Identity-Provider konfiguriert.",
+	"yuv.app.user-management.settings.oidc.property.clientId": "Client-ID",
+	"yuv.app.user-management.settings.oidc.property.displayName": "Anzeigename",
+	"yuv.app.user-management.settings.oidc.property.redirectUri": "Redirect-URI",
+	"yuv.app.user-management.settings.oidc.provisioning.property.clientName": "Client-Name",
+	"yuv.app.user-management.settings.oidc.provisioning.property.clientSecret": "Client-Secret",
+	"yuv.app.user-management.settings.oidc.provisioning.property.tenantUrl": "Tenant-URL",
+	"yuv.app.user-management.settings.oidc.provisioning.property.tokenUrl": "Token-URL",
+	"yuv.app.user-management.settings.oidc.section.provisioning": "Provisioning-Informationen",
 	"yuv.app.user-management.users.action.activate.error": "Benutzer '{{username}}' konnte nicht aktiviert werden.",
 	"yuv.app.user-management.users.action.activate.label": "Benutzer aktivieren",
 	"yuv.app.user-management.users.action.activate.success": "Benutzer '{{username}}' wurde erfolgreich aktiviert.",
@@ -50,10 +80,13 @@
 	"yuv.app.user-management.users.action.delete.label": "Benutzer löschen",
 	"yuv.app.user-management.users.action.delete.success": "Benutzer '{{username}}' erfolgreich gelöscht.",
 	"yuv.app.user-management.users.action.edit.error.unknown": "Benutzer konnte nicht bearbeitet werden da ein unbekannter Fehler aufgetreten ist. Bitte versuche es später erneut oder verwende andere Eingabewerte.",
+	"yuv.app.user-management.users.action.edit.identitySource.external.hint": "Dieser Benutzer wird durch einen externen Identitätsprovider verwaltet (z.B. Entra ID). Es können ausschließlich Rollen bearbeitet werden.",
 	"yuv.app.user-management.users.action.edit.label": "Benutzer bearbeiten",
 	"yuv.app.user-management.users.action.edit.success": "Der Benutzer '{{username}}' wurde erfolgreich bearbeitet.",
 	"yuv.app.user-management.users.details.empty": "Kein Benutzer ausgewählt",
 	"yuv.app.user-management.users.details.title": "Benutzerinformationen",
+	"yuv.app.user-management.users.identitySource.external.tooltip": "Verwaltet durch einen externen Identitätsprovider (z.B. Entra ID)",
+	"yuv.app.user-management.users.navigation.pagination.aria": "Seite auswählen",
 	"yuv.app.user-management.users.navigation.refresh.tooltip": "Aktualisieren",
 	"yuv.app.user-management.users.object.property.disabled": "Deaktiviert",
 	"yuv.app.user-management.users.object.property.email": "E-Mail",
@@ -61,8 +94,10 @@
 	"yuv.app.user-management.users.object.property.firstname": "Vorname",
 	"yuv.app.user-management.users.object.property.groups": "Gruppen",
 	"yuv.app.user-management.users.object.property.id": "ID",
+	"yuv.app.user-management.users.object.property.identitySource.external": "Externer Identitätsprovider",
 	"yuv.app.user-management.users.object.property.lastname": "Nachname",
 	"yuv.app.user-management.users.object.property.roles": "Rollen",
+	"yuv.app.user-management.users.object.property.state": "Status",
 	"yuv.app.user-management.users.object.property.username": "Benutzername",
 	"yuv.app.user-management.users.roles.assign": "Ausgewählte Rollen zuweisen",
 	"yuv.app.user-management.users.roles.assignAll": "Alle Rollen zuweisen",

package/lib/assets/i18n/en.json

@@ -4,6 +4,8 @@
 	"yuv.app.user-management.navigation.groups.tooltip": "Switch to groups view",
 	"yuv.app.user-management.navigation.users.label": "Users",
 	"yuv.app.user-management.navigation.users.tooltip": "Switch to users view",
+	"yuv.app.user-management.navigation.settings.label": "Settings",
+	"yuv.app.user-management.navigation.settings.tooltip": "Show identity provider settings",
 	"yuv.app.user-management.group.action.create.success": "The group was successfully created.",
 	"yuv.app.user-management.groups.action.button.cancel": "Cancel",
 	"yuv.app.user-management.groups.action.button.create": "Create",
@@ -20,6 +22,7 @@
 	"yuv.app.user-management.groups.action.edit.success": "The group '{{name}}' was edited successfully.",
 	"yuv.app.user-management.groups.details.empty": "No group selected",
 	"yuv.app.user-management.groups.details.title": "Group information",
+	"yuv.app.user-management.groups.navigation.pagination.aria": "Select page",
 	"yuv.app.user-management.groups.navigation.refresh.tooltip": "Refresh",
 	"yuv.app.user-management.groups.object.property.description": "Description",
 	"yuv.app.user-management.groups.object.property.id": "ID",
@@ -27,6 +30,33 @@
 	"yuv.app.user-management.groups.object.property.name": "Name",
 	"yuv.app.user-management.groups.object.property.roles": "Roles",
 	"yuv.app.user-management.groups.title": "Group Overview",
+	"yuv.app.user-management.settings.action.button.close": "Close",
+	"yuv.app.user-management.settings.action.button.configure": "Configure now",
+	"yuv.app.user-management.settings.dialog.title": "Identity provider (OIDC)",
+	"yuv.app.user-management.settings.oidc.action.copy.error": "Unable to copy to the clipboard. Please copy it manually.",
+	"yuv.app.user-management.settings.oidc.action.copy.label": "Copy to clipboard",
+	"yuv.app.user-management.settings.oidc.action.copy.success": "Copied to clipboard.",
+	"yuv.app.user-management.settings.oidc.action.delete.confirm.message": "Do you really want to delete the OIDC identity provider configuration? This action cannot be undone.",
+	"yuv.app.user-management.settings.oidc.action.delete.error": "Unable to delete the OIDC identity provider configuration.",
+	"yuv.app.user-management.settings.oidc.action.delete.label": "Delete configuration",
+	"yuv.app.user-management.settings.oidc.action.delete.success": "The OIDC identity provider configuration was deleted successfully.",
+	"yuv.app.user-management.settings.oidc.action.update.error": "Unable to update the client secret.",
+	"yuv.app.user-management.settings.oidc.action.update.label": "Update",
+	"yuv.app.user-management.settings.oidc.action.update.success": "The client secret was updated successfully.",
+	"yuv.app.user-management.settings.oidc.configure.error.discovery": "The OIDC endpoints could not be resolved from the discovery URL. Please check the discovery URL.",
+	"yuv.app.user-management.settings.oidc.configure.error.unknown": "The OIDC identity provider could not be configured due to an unknown error. Please check your input and try again.",
+	"yuv.app.user-management.settings.oidc.configure.property.clientSecret": "Client secret",
+	"yuv.app.user-management.settings.oidc.configure.property.discoveryUrl": "Discovery URL",
+	"yuv.app.user-management.settings.oidc.error.unknown": "Unable to load the OIDC identity provider configuration due to an unknown error. Please try again later.",
+	"yuv.app.user-management.settings.oidc.notConfigured": "No external OIDC identity provider is configured for this tenant.",
+	"yuv.app.user-management.settings.oidc.property.clientId": "Client ID",
+	"yuv.app.user-management.settings.oidc.property.displayName": "Display name",
+	"yuv.app.user-management.settings.oidc.property.redirectUri": "Redirect URI",
+	"yuv.app.user-management.settings.oidc.provisioning.property.clientName": "Client name",
+	"yuv.app.user-management.settings.oidc.provisioning.property.clientSecret": "Client secret",
+	"yuv.app.user-management.settings.oidc.provisioning.property.tenantUrl": "Tenant URL",
+	"yuv.app.user-management.settings.oidc.provisioning.property.tokenUrl": "Token URL",
+	"yuv.app.user-management.settings.oidc.section.provisioning": "Provisioning information",
 	"yuv.app.user-management.users.action.activate.error": "User '{{username}}' could not be activated.",
 	"yuv.app.user-management.users.action.activate.label": "Activate user",
 	"yuv.app.user-management.users.action.activate.success": "User '{{username}}' was successfully activated.",
@@ -50,10 +80,13 @@
 	"yuv.app.user-management.users.action.delete.label": "Delete user",
 	"yuv.app.user-management.users.action.delete.success": "User '{{username}}' was successfully deleted.",
 	"yuv.app.user-management.users.action.edit.error.unknown": "Unable to edit user due to an unknown error. Please try again later or change the values of your entry.",
+	"yuv.app.user-management.users.action.edit.identitySource.external.hint": "This user is managed by an external identity provider (e.g. Entra ID). Only roles can be edited.",
 	"yuv.app.user-management.users.action.edit.label": "Edit user",
 	"yuv.app.user-management.users.action.edit.success": "The user '{{username}}' was edited successfully.",
 	"yuv.app.user-management.users.details.empty": "No user selected",
 	"yuv.app.user-management.users.details.title": "Credentials",
+	"yuv.app.user-management.users.identitySource.external.tooltip": "Managed by an external identity provider (e.g. Entra ID)",
+	"yuv.app.user-management.users.navigation.pagination.aria": "Select page",
 	"yuv.app.user-management.users.navigation.refresh.tooltip": "Refresh",
 	"yuv.app.user-management.users.object.property.disabled": "Deactivated",
 	"yuv.app.user-management.users.object.property.email": "E-mail",
@@ -61,8 +94,10 @@
 	"yuv.app.user-management.users.object.property.firstname": "First name",
 	"yuv.app.user-management.users.object.property.groups": "Groups",
 	"yuv.app.user-management.users.object.property.id": "ID",
+	"yuv.app.user-management.users.object.property.identitySource.external": "External identity provider",
 	"yuv.app.user-management.users.object.property.lastname": "Last name",
 	"yuv.app.user-management.users.object.property.roles": "Roles",
+	"yuv.app.user-management.users.object.property.state": "Status",
 	"yuv.app.user-management.users.object.property.username": "User name",
 	"yuv.app.user-management.users.roles.assign": "Assign selected roles",
 	"yuv.app.user-management.users.roles.assignAll": "Assign all roles",

package/package.json

@@ -34,5 +34,5 @@
   "dependencies": {
     "tslib": "^2.3.0"
   },
-  "version": "2.0.3"
+  "version": "2.1.0"
 }

package/types/yuuvis-user-management-app.d.ts

@@ -26,6 +26,8 @@ interface UserObject {
     lastName: string;
     email: string;
     enabled: boolean;
+    /** Read-only flag set by the backend for users provisioned via an external identity provider (e.g. SCIM from Entra ID). */
+    externallyManaged?: boolean;
 }
 interface UserDetailsObject extends UserObject {
     groups: string[];
@@ -38,6 +40,26 @@ interface UsersSearchResponse {
     totalNumItems: number;
     objects: UserObject[];
 }
+/**
+ * OIDC identity provider configuration of the current tenant (e.g. Microsoft Entra ID) as
+ * returned by `/tenant-management/api/admin/identity-provider/oidc`. Sensitive config values
+ * (e.g. clientSecret) are removed by the backend before delivery.
+ */
+interface OIDCProviderConfig {
+    /** Display name shown on the login page. */
+    displayName?: string;
+    /** Provider-specific configuration (clientId, metadataDescriptorUrl, defaultScope, ...). */
+    config?: Record<string, string>;
+    /** Computed redirect URI that must be registered with the external IdP. */
+    redirectUri?: string;
+    /** SCIM provisioning settings to configure at the external IdP (only present if a SCIM client exists in the tenant's realm). */
+    scimProvisioning?: {
+        tenantUrl?: string;
+        tokenEndpoint?: string;
+        clientId?: string;
+        clientSecret?: string;
+    };
+}
 
 declare class UserRequest {
     username?: string;
@@ -71,6 +93,22 @@ declare class YuvUserManagementService {
     updateGroup(groupId: string, updateGroupRequest: GroupRequest): Observable<void>;
     deleteGroup(group: GroupObject): Observable<boolean>;
     getUserDetails(id: string): Observable<UserDetailsObject>;
+    /**
+     * Fetches the OIDC identity provider configuration (e.g. Microsoft Entra ID) of the current
+     * tenant. Emits a 404 error if no OIDC identity provider is configured.
+     */
+    fetchOIDCProviderConfig(): Observable<OIDCProviderConfig>;
+    /**
+     * Creates (or updates) the OIDC identity provider configuration of the current tenant. The
+     * discovery URL must be passed as `config.metadataDescriptorUrl` — the backend resolves the
+     * OIDC endpoints (authorizationUrl, tokenUrl, jwksUrl, ...) from the discovery document.
+     */
+    setOIDCProviderConfig(providerConfig: OIDCProviderConfig): Observable<OIDCProviderConfig>;
+    /**
+     * Deletes the OIDC identity provider configuration of the current tenant, after the user
+     * confirmed the action.
+     */
+    deleteOIDCProviderConfig(): Observable<boolean>;
     getGroupDetails(id: string): Observable<GroupDetailsObject>;
     static ɵfac: i0.ɵɵFactoryDeclaration<YuvUserManagementService, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<YuvUserManagementService>;