fix

apps/dolibarr/application.tf

@@ -1,4 +1,6 @@
 locals {
+  app-name = var.component == var.instance ? var.instance : format("%s-%s", var.component, var.instance)
+  main-group = format("app-%s", local.app-name)
   sorted-group-names = reverse(distinct(sort([
     for grp in var.user-groups: grp.name
   ])))
@@ -17,6 +19,7 @@ data "authentik_group" "vynil-admin" {
 resource "authentik_group" "groups" {
   count = length(local.sorted-groups)
   name  = local.sorted-groups[count.index].name
+  attributes   = jsonencode({"${local.app-name}" = true})
 }
 data "authentik_group" "readed_groups" {
   depends_on = [ authentik_group.groups ]
@@ -32,25 +35,25 @@ resource "authentik_application" "dolibarr_application_ldap" {
 }
 
 resource "authentik_policy_binding" "dolibarr_ldap_access_users" {
-  count = length(local.sorted-groups)
   target = authentik_application.dolibarr_application_ldap.uuid
-  group  = authentik_group.groups[count.index].id
-  order  = count.index
+  policy = authentik_policy_expression.policy.id
+  order  = 0
 }
 resource "authentik_policy_binding" "dolibarr_ldap_access_ldap" {
   target = authentik_application.dolibarr_application_ldap.uuid
   group  = authentik_group.dolibarr_ldapsearch.id
-  order  = length(local.sorted-groups)+1
+  order  = 1
 }
 resource "authentik_policy_binding" "dolibarr_ldap_access_vynil" {
   target = authentik_application.dolibarr_application_ldap.uuid
   group  = data.authentik_group.vynil-admin.id
-  order  = length(local.sorted-groups)+2
+  order  = 2
 }
 
 resource "authentik_application" "dolibarr_application_saml" {
   name              = "${var.instance}"
   slug              = "${var.component}-${var.instance}"
+  group             = var.app-group
   protocol_provider = authentik_provider_saml.dolibarr.id
   meta_launch_url   = format("https://%s.%s", var.sub-domain, var.domain-name)
   meta_icon         = format("https://%s.%s/%s", var.sub-domain, var.domain-name, "theme/dolibarr_256x256_color.png")