Uploaded image for project: 'Identity'
  1. Identity
  2. ID-8332

Changing emails to another domain through REST API results in error related to SSO / SAML

XMLWordPrintable

      Issue Summary

      Changing emails to another domain through REST API results in error related to SSO / SAML
      This is caused by the enforcement of SSO in the Authentication policies.

      This is reproducible on Data Center: no

      Steps to Reproduce

      1. Claim 2 domains in the Organization
      2. Enforce SSO in a particular user through Auth policies
      3. Try to change the email of this user using the public API

      Expected Results

      Should change the user's email.

      Actual Results

      Results in the following error:

      {"key":"forbidden.action","context":{"allowed":false,"reason":{"key":"authPolicy.saml"}},"errorKey":"forbidden.action","errorDetail":{"allowed":false,"reason":{"key":"authPolicy.saml"}}}

      Workaround

      The workaround is to change authentication policies momentarily and disable SSO enforcement.

            [ID-8332] Changing emails to another domain through REST API results in error related to SSO / SAML

            Joel Ryden added a comment -

            The change is now available in production. Admins should no be able to change email on accounts that are under a SAML SSO authentication policy.

            Joel Ryden added a comment - The change is now available in production. Admins should no be able to change email on accounts that are under a SAML SSO authentication policy.

            Timothy Frew added a comment -

            As discussed, we’re going to close this issue as it's the expected default behaviour.

            Timothy Frew added a comment - As discussed, we’re going to close this issue as it's the expected default behaviour.

              jryden Joel Ryden
              aborzzatto Andre Borzzatto
              Affected customers:
              0 This affects my team
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: