gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
17.5k stars 1.75k forks source link

Improve visibility and troubleshooting of SSO login failures #47248

Closed stevenGravy closed 2 weeks ago

stevenGravy commented 2 weeks ago

Expected behavior:

A unsuccessful SSO login would provide a message that works for a non-admin user and admin. Esp in the case of cloud this can be frustrating as the admin user does not have access the process log, just the Audit log. There should also be some links to troubleshooting. As we know when the person is in cloud this is a good point to let them know about support if they're completely locked out.

Current behavior:

A user is told to check the Teleport log. If I'm someone who just accesses and doesn't administrator Teleport I could have no access to the Teleport log.

Image

Bug details:

  1. Configure a sso login
  2. Have a user who's traits do not map to a role
  3. Attempt to login
zmb3 commented 2 weeks ago

Duplicate of https://github.com/gravitational/teleport/issues/17486