CityOfBoston / CityWorker-issues-Incapsulate

Archived for legacy purposes
0 stars 0 forks source link

Users have repeated email addresses #135

Closed jqr closed 4 years ago

jqr commented 6 years ago

Many Users within Salesforce have an email address already in use by another User. In Spot Server, all Users must have a unique email address. This will cause non-deterministic behavior from Users perspective like Tickets created by them not showing in Submitted by You.

Explanation

When an address is repeated, one of the Users will have their email field removed, but both Users are stored within Spot Server.

Authentication for both Users will yield the same User within Spot Server/City Worker. As far as those systems are concerned, these are a single User, the one with the email address.

Actions taken within Incapsulate/Salesforce will be done by the User who most recently authenticated and shares the email address. This is because Spot Server uses the most recent accessToken from the email address, which is merely which one authenticated most recently.

Example

Salesforce User 005r0000001xrCpAAI and 005r0000001xrGcAAI both have the email address ellen.mcdonough@boston.gov.test.

Spot Server has chosen 005r0000001xrGcAAI to be the User retaining the email address and authenticating as 005r0000001xrCpAAI will actually authenticate as 005r0000001xrGcAAI within City Worker, but the correct User within Salesforce.