search

kasmtech / workspaces-issues

18 stars 4 forks source link

[Authentication] Have both username/password AND OpenID for the same user. #212

Open nielsbasjes opened 2 years ago

nielsbasjes commented 2 years ago

I have installed the developer build (files are dated Jun 3rd 06:11H) and I have configured the OpenID in conjunction with Google (i.e. I'm now able to login using my Google account).

Improvement suggestion:

I want to have the option to login into my account using different SSO accounts AND still have the username/password option. This effectively means I would like to have a userid ('niels') and have (possibly multiple) email addresses from SSO which allow me to login into my account.

I would expect that a user (logged in somehow) has the option to add multiple email addresses to login into their account.

nielsbasjes commented 2 years ago

Note that this suggestion may not be desirable in all situations. In a corporate setup you may want to restrict it to only SSO and not even allow having a password.

j-travis commented 2 years ago

Thanks for the suggestion @nielsbasjes .

It seems like most administrators who utilize SSO do so to simplify password management for themselves and their users , as well as being able to enforce things like MFA etc.

Typically, administrators will create a separate emergency local auth admin account in case the SSO service is down which allows them to still administer the system.

I welcome further input from the community on use cases that require this change.