Description

The Mapping Rules UI of Orchestration Cluster Identity is displayed in SaaS deployments. It has no end user value as the JWT structure is opaque. Note that we nevertheless have mapping rules in those setups that we automatically create (for dynamic support agent, admin role assignment). It's okay that users cannot see those then.

Note that we want to display it in Self-Managed OIDC setups, so it should only specifically be hidden in SaaS deployments.

Steps to reproduce

1. Create a new cluster in SaaS
2. Navigate to the Identity UI

Current behavior

• Mapping Rules UI is visible

Expected behavior

• Mapping Rules UI is not shown

Environment

SM

Version

• 8.8 only

Rootcause

• This case was not considered when we built the Mapping Rules UI, so there is no conditional rendering implemented

Solution ideas

• Use a window config variable to hide the UI conditionally
  • Needs a backend change, as of today we don't have a flag for SaaS deployments specifically yet. It's easy to obtain though (based on cluster and org id in the application config).

Acceptance criteria

For non-OIDC setups,

• Users UI is shown instead of Mapping Rules always

For OIDC setups,

• Mapping Rules UI is shown for Self-Managed, but not for SaaS

Dev -> QA handover

• Resources:
• Versions to validate:
• Release version (in which version this feature will be released):

Links

• Discussion that the ticket originates from: Add docs for Groups and Roles camunda-docs#6013 (comment)

Implementation

• frontend change fix: hide mapping rules ui for SaaS #36675
• backend change (send organizationId as part of client config) feat: add AppSwitcher to Identity #36528