Keycloak group and role names

[Mtze]

The current prompt creates Keycloak groups with the following naming scheme:

<Course name>-<Semester tag>

It also creates three subgroups:

<Course name>-<Semester tag>-Student
<Course name>-<Semester tag>-Lecturer
<Course name>-<Semester tag>-Editor

The general structure is great, but there are a few areas where the naming could be improved.

1. It’s hard to tell which groups were created manually and which were created by the prompt in Keycloak.
2. The semester tag isn’t grouped together, since it’s a suffix instead of a prefix.
3. The subgroup names are quite long.

I’ve come up with a suggestion (up for discussion):

• We can create a top-level group in Keycloak that all the other prompt-created groups are sorted into.
• The course group name can be formed the other way around: <Semester tag>-<Course name>.
• The Lecturer, Student, and Editor groups can be subgroups of the course group without the course name in the group name.

- prompt
| - ss25-fancy-course
|  | - Lecturer
|  | - Editor  
|  | - Student
| - ss25-fancy-second-course
|  | - Lecturer
|  | - Editor  
|  | - Student

The roles for prompt should also follow this convention - even without the tree structure - so <semester tag>-<course-name>-<role>

What do you think?

[niclasheun]

Two thoughts to that:

• For the roles, it is crucial to keep the course name included. So we would not have a 1:1 mapping between role name and group name any more (which is fine I guess)
• When I implemented it, I researched and thought that keycloak has only 1 level of subgrouping. So nesting all prompt groups in a top level prompt group is (to my understanding) not possible.