Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CAL-3600] SAML/SSO idP auto-merging allows slipping of uppercase in email #14833

Closed
alishaz-polymath opened this issue May 1, 2024 · 1 comment
Assignees
Labels
authentication area: authentication, auth, google sign in, password, SAML, password reset, can't log in 🐛 bug Something isn't working enterprise area: enterprise, audit log, organisation, SAML, SSO High priority Created by Linear-GitHub Sync
Milestone

Comments

@alishaz-polymath
Copy link
Member

When we merge identities in the next-auth-options, if the idP passes email with uppercase characters, it slips the email with uppercase characters and the account merging causes the user's email to be updated with said uppercase characters. This results in a non-usable state of the user's account and in turn creates a new account for the user when attempted to login.
A potential fix is to probably identify the source where email is updated with uppercase and simply force lowercase there.

From SyncLinear.com | CAL-3600

@alishaz-polymath alishaz-polymath added the enterprise area: enterprise, audit log, organisation, SAML, SSO label May 1, 2024
@dosubot dosubot bot added authentication area: authentication, auth, google sign in, password, SAML, password reset, can't log in 🐛 bug Something isn't working labels May 1, 2024
@alishaz-polymath
Copy link
Member Author

While at it, probably a good idea to improve description for pasting the XML Metadata in the SAML/SSO Setup step

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
authentication area: authentication, auth, google sign in, password, SAML, password reset, can't log in 🐛 bug Something isn't working enterprise area: enterprise, audit log, organisation, SAML, SSO High priority Created by Linear-GitHub Sync
Projects
None yet
Development

No branches or pull requests

2 participants