I can see from the admin settings that the built-in (non-SAML) SSO support can do things like: sso overrides bio - Overrides user bio in user profile and prevents user from changing it sso overrides email - Overrides local email with external site email from SSO payload on every login, and pre…

I just tested this by enabling sso overrides {bio,email,username,name}, and someone logging in for the first time via SAML still has the option to choose their username and full name. We tested setting it to something random, and it successfully created their account. So it appears it is not actual…

So did none of the fields get pushed to Discourse when you created the new account? Or was it the case that the name, etc got pushed to Discourse when the account was created but the user was still able to change it? SAML is insanely difficult to configure since it seems that everyone who uses it u…

[imagem] pfaffman: I’m pretty sure that SAML plugins supports all of those settings. It’s still SSO. Nope, and this is a too common mistake. SAML on Discourse is not SSO, it’s just another login strategy, like Facebook, Google or Email/Password. If you want to use it as the one true login, …

Thanks for the info @Falco - it’s not actually a showstopper for us, but we may well try to contribute some features back to the SAML plugin in the near future. Thanks

Discourse-saml as sole login method

Product Support Self-hosting

pfaffman (Jay Pfaffman) 27 Julho , 2017 12:57 2

I’m pretty sure that SAML plugins supports all of those settings. It’s still SSO.

Tópico		Respostas	Vistas
How to use Discourse Connect (SSO) to update avatar, username, name? SSO	7	2603	9 Janeiro , 2023
Discourse/Drupal SSO Username Questions Product Support	1	887	22 Setembro , 2021
Transforming usernames with SSO Product Support	3	1403	30 Janeiro , 2020
Configure OneLogin's SAML for Discourse Integrations sso , how-to	0	7888	18 Agosto , 2017
Change login button action Product Support	4	1518	16 Março , 2018

Discourse-saml as sole login method

Related topics