HCL Domino Ideas Portal
Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.
Domino 14.5 can be set-up to use OIDC for web authentication (e.g. via Keycloak) so that users can authenticate without needing person documents in a Domino directory. Users then get the "-Default-" level of access to application databases.
It would be nice if we could use "email" addresses in ACL groups so that users could be granted different levels of access to application databases in this scenario.
As I think suggested, it would be nice if via OIDC an additional claim could be returned that would be used as the authenticated Notes user name (this should be optional).
Should also be able to assign "sub" as Notes username instead of "email" as it is now