DonutsNL / glpisaml

I moved to: https://codeberg.org/QuinQuies This plugin is a full rewrite of Derrick Smith's initial SAML plugin for GLPI10+. Its redesigned to be compatible with GLPI10+, PSR, Composer, Support multiple saml idp's, user right rules and more.
https://discord.gg/yKZB7VQUk6
GNU General Public License v3.0
10 stars 0 forks source link

Provide an alternative to the login buttons exposing allot of information. #15

Closed DonutsNL closed 2 months ago

DonutsNL commented 6 months ago

The current login button implementation might give away allot of information about customers or IDPs linked to the GLPI instance. There might be an alternative route where no information about the configured idps is exposed in this way.

The idea is to 'capture' the user login email address using the username field and match its domain against a configured idps. If a match is succesfull it will perform the login using that idp. For this purpose the following field has been introduced.

We can toggle the visability of the login button based on this field being used.

image