Using multiple auth providers results in all auth data being wiped for a user [simplesamlphp_auth]

Created on 1 April 2020, over 4 years ago
Updated 8 November 2023, about 1 year ago

On a site supporting external authentication from services other than SAML-based ones, a user account with an authmap record for a non-SAML provider will see that record wiped if user form is submitted with the "Enable this user to leverage SAML authentication" checkbox disabled. This is due to ExternalAuth/Authmap not supporting clearing of authmap records by both uid and provider, but just by uid.

A possible fix is being worked on at #3070335: Using multiple auth providers results in all auth data being wiped for a user ; simplesamlphp_auth itself will also require an update once externalauth gets the proper support in place. The code to change is located at simplesamlphp_auth_user_form_submit() (.module file).

🐛 Bug report
Status

Fixed

Version

4.0

Component

Code

Created by

🇨🇴Colombia jedihe

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024