search

SURFscz / SBS

Samenwerking Beheer Systeem ↣ Collaboration Management System
Apache License 2.0
3 stars 2 forks source link

New users are only partially provisioned (no username, name, etc) #743

Closed baszoetekouw closed 1 year ago

baszoetekouw commented 1 year ago

When a new user is sent to SSID, they are sent to the AUP screen after completing SSID stepup, and are never sent back to the continue endpoint. Because if this, they never complete a regular OIDC login session and so are never fully provisioned (beyond the limited set of attributes SBS received in the proxy_authz endpoint)

baszoetekouw commented 1 year ago

and eventually fixed in 7cabee97f20014e571bb6d34a70a4f6b5ef744cb b487c6efb24fd35e3dc252b69eb9cbc91101922a bf71897883561720fcb8c4a6ed2833b3f804e9e4 11b2e58338e3ef1a96327c4f88712c7dfdd12e86 faf884ad2e8035786330799d9ba6c28bbef2d6c0

baszoetekouw commented 1 year ago

Waiting for activation of ssid for test-idp before I can test this.

baszoetekouw commented 1 year ago

tested on acc