Prevent the user from disabling the unique OAuth login service

cosmocode / dokuwiki-plugin-oauth

Generic oAuth1 and oAuth2 plugin for DokuWiki

http://www.dokuwiki.org/plugin:oauth

30 stars 79 forks source link

Prevent the user from disabling the unique OAuth login service #137

Open 5p4k opened 1 year ago

5p4k commented 1 year ago

In our scenario users log in to DokuWiki exclusively using our SSO (which we are changing from SAML to OAuth). Even if we enable singleService, users can toggle the login service off in their profile page. Doing so, they effectively lock themselves out until when they are manually added back to the group.

Is there a mechanism to hide the service from the list in the user page? Or hide the list entirely.

glensc commented 1 year ago

[ ] I wish to remove my account from this wiki. This action can not be undone. Remove My Account

this prompt is also useless, because with singleService being enabled, once you log out from wiki, but not from the provider, and open dokuwiki again, you will be signed in by sso automatically without any dialogs.

I'm using oauthazure