Feature request: Using different claim for OIDC username

[georgegil]

Would it be possible to have the username claim using email instead of name for the claim?

Using Github as OIDC provider, name is garunteed to be unique, however using AzureAD this is not the case, but email is most definitely unique.

seeing as a number of people probably using GitHub as IDP, perhaps which claim to use can be a paramater being specified at deploy time?

for example:

--oidc-name=<oidc_name>
--oidc-issuer-url=<issuer-url>
--oidc-client-id=<client-id>
--oidc-username-claim=email
--oidc-client-secret=<client-secret>

[leg100]

I don't believe Github supports OIDC. Not as an identity provider anyway. I think it only supports OAuth, hence people using OTF don't use the OIDC flags for Github, but --github-client-id, etc, instead.

But that is by the by. I think it's reasonable to provide the additional flag as you're asking for.

[georgegil]

Oh course, didn't read the documentation properly, Github uses different mechanisms. My bad.

Thanks for looking into this.