Closed travjenkins closed 3 months ago
Might need to complete this work (or something in between) https://github.com/estuary/ui/issues/998 as I don't think the V1 client supports the function signInWithSSO
Still need to dig into that tomorrow.
We will need to figure out a UX for how a user with a new tenant gives us the domain and the path to the metadata.
Requires https://github.com/estuary/ui/issues/1137 complete
Feature
Add the ability to log into the dashboard with SSO
Notes
This is not 100% fleshed out yet as there are some known unknowns. One large known unknown is that once you add SSO Supabase will no longer auto-handle merging accounts. This means that anytime a user's email is used to fetch details could end up returning two+ accounts. The details are mentioned below with No Linking
Need to make sure when a user logs out of an SSO account that they are landed back on the SSO page.
Complications
Running SSO on local Supabase is kinda tough / impossible : https://github.com/supabase/cli/issues/1335
Docs
SSO Auth https://supabase.com/docs/guides/auth/enterprise-sso/auth-sso-saml No linking https://supabase.com/docs/guides/auth/enterprise-sso/auth-sso-saml#user-accounts-and-identities
Exampled for running local https://calvincchan.com/blog/self-hosted-supabase-enable-sso https://calvincchan.com/blog/240228_self_hosted_supabase_with_saml_attribute_mapping
Examples
This is a good example of the kind of documentation we might need to write Okta https://supabase.com/docs/guides/platform/sso/okta