From e00ccf99057f57d8983f6098b773f786b6be7e07 Mon Sep 17 00:00:00 2001
From: Simon <{s.thiessen@local-it.org}>
Date: Mon, 12 May 2025 15:00:45 +0200
Subject: [PATCH] fix akadmin saml mapping

---
 abra.sh         | 2 +-
 local.yaml.tmpl | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/abra.sh b/abra.sh
index 3473bc3..215339c 100644
--- a/abra.sh
+++ b/abra.sh
@@ -1,5 +1,5 @@
 export ENTRYPOINT_CONF_VERSION=v2
-export LOCAL_CONF_VERSION=v2
+export LOCAL_CONF_VERSION=v3
 
 create_admin () {
     export DATABASE_URL="$DATABASE_TYPE://$DATABASE_USER:$(cat /run/secrets/db_password)@$DATABASE_HOST/$DATABASE_NAME"
diff --git a/local.yaml.tmpl b/local.yaml.tmpl
index a208c8e..40ad5cb 100644
--- a/local.yaml.tmpl
+++ b/local.yaml.tmpl
@@ -11,8 +11,8 @@ kimai:
       attribute: http://schemas.xmlsoap.org/claims/Group
       mapping:
       # Insert your roles here (ROLE_USER is added automatically)
-        - { saml: admin.group, kimai: ROLE_ADMIN }
-        - { saml: "authentik Admins", kimai: ROLE_ADMIN }
+        - { saml: admin.group, kimai: ROLE_SUPER_ADMIN }
+        - { saml: "authentik Admins", kimai: ROLE_SUPER_ADMIN }
     connection:
       # You SAML provider
       # Your Authentik instance, replace https://authentik.company with your authentik URL