matomo-org / matomo

Empowering People Ethically with the leading open source alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. Liberating Web Analytics. Star us on Github? +1. And we love Pull Requests!
https://matomo.org/
GNU General Public License v3.0
19.72k stars 2.62k forks source link

Token auth changes Frequently after SSO implementation #11859

Open Sobhika2 opened 7 years ago

Sobhika2 commented 7 years ago

Hello,

It is noticed that Piwik has started changing the token auth assigned to each users since we enabled single sign on. Interesting fact is that there are 3 unique token_auths(say a,b,c) assigned to one person, and this is getting assigned to the users at times. Since, we are using single sign on there is no possibility that a password change can affect this.

Can anyone help me on this.

Regards, Sobhika

sgiehl commented 7 years ago

@Sobhika2 Which plugin are you using for SSO ?

Sobhika2 commented 7 years ago

Hi Stefen,

I am using LDAP plugin for SSO.

Regards

From: Stefan Giehl [mailto:notifications@github.com] Sent: Friday, July 21, 2017 12:51 PM To: piwik/piwik piwik@noreply.github.com Cc: Sobhika Kunnath Sobhika_Kunnath@rcomext.com; Mention mention@noreply.github.com Subject: Re: [piwik/piwik] Token auth changes Frequently after SSO implementation (#11859)

@Sobhika2https://github.com/sobhika2 Which plugin are you using for SSO ?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/piwik/piwik/issues/11859#issuecomment-316925224, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AZjJqzCjlG_7s8mPzp4csY8KJQus_yckks5sQFFlgaJpZM4OUIT9.

This e-mail, including attachments, is intended for the person(s) or company named and may contain confidential and/or legally privileged information. Unauthorized disclosure, copying or use of this information may be unlawful and is prohibited. If you are not the intended recipient, please delete this message and notify the sender. All incoming and outgoing e-mail messages are stored in the Swiss Re Electronic Message Repository. If you do not wish the retention of potentially private e-mails by Swiss Re, we strongly advise you not to use the Swiss Re e-mail account for any private, non-business related communications.

Sobhika2 commented 7 years ago

@sgiehl

Any update on this?