Hello everyone! I’m trying to make a user an admin, I have tried going to admin/users/ and clicking on the Grant Admin and Grant Moderator buttons. If I go back to my user list, I can see that the user was granted those rights. However, as soon as the user logs in, the access is automatically revoked and reverts back to a regular user. I have also tried logging in via SSH and granting admin access to the user manually, butI get the same result where the user logs in and is reverted back to regular user rights… What is going on here?

Are you using SSO? Or just the standard Discourse login system?

Enable verbose SSO logs in settings. I believe that your SSO payload is sending admin: false and revoking the rights of the user.

Thanks Rafael, I’m checking the logs now. How would I fix this issue assuming that that is indeed what is happening?

[imagem] Denis_Heraud: How would I fix this issue assuming that that is indeed what is happening? Like Jeff said: [imagem] Add link to external SSO profile to profile page Support Being a parent (authentication site) entails so many responsibilities, Jay! You will need to add admin: true for this user SSO payload.

Haha, yes I realize that, I’m just not sure how to go about it. :slight_smile: And you were right, the SSO log shows: admin: false moderator: false So the question is, how would I pass on a parameter to a specific user’s SSO payload? I have never done that before.

[imagem] Denis_Heraud: So the question is, how would I pass on a parameter to a specific user’s SSO payload? I have never done that before. You already do that! If user A comes in, you respond with usera@mail.com for email and when user B comes you respond with userb@othermail.com. Your SSO payload is already diferent for each user. Something that is probably easier, is dropping both moderator and admin from the payload altogether and manage this only trough Discourse. I believe that it will work, too.

Did you figure it out @Denis_Heraud?

@zogstrip Not yet but we may be migrating our database soon so I was waiting for that to happen before I take a stab at it.

Can't make user admin, reverts when logging in

Product Support

Falco (Falco) 15 Março , 2017 17:57 6

Like Jeff said:

You will need to add admin: true for this user SSO payload.

Tópico		Respostas	Vistas
I lost my admin rights due to misconfigured SSO SSO	7	826	7 Maio , 2020
Users are losing Admin role due to SSO Product Support	6	964	5 Dezembro , 2017
SSO provider implementation - Admin, moderator and groups ignored? Product Support	11	1820	15 Abril , 2019
SSO is forcibly creating the user as an admin Bug	12	1442	16 Setembro , 2021
How admin user re-logins after using discourse connect sso and custom domain SSO	1	1080	21 Novembro , 2022

Can't make user admin, reverts when logging in

Related topics