@codinghorror , how about changing the email address for a member who is active? I don’t see a way to do that, and I have a couple members who want it.

Does it work if you remotely log out the target user from /admin and then have them login again?

Kicked out the user twice and both times the email changed correctly. Maybe not a cookie then. Or maybe things just work the way they are supposed now. I haven’t updated Discourse for a month though not to get a “fix” by mistake as I want to figure out the real reason for things not working. The r…

Weird! The fact that force-logging out the user makes me think that he didn’t really log out before, so no SSO happened (he just kept on using his old session). (I have no idea about the crashes, though.)

I don’t have a real-world test case right now, but when it comes up again, I’ll let you know what happens.

Obviously I’m testing with several accounts I created just for this purpose (using virtual machines and other browsers and too much time testing :wink: ).

I think I resolved the issue on my end. It had nothing to do with Discourse. There’s a bit of code in my site’s footer that checks – for users whose email has been verified – if they are logged in to Discourse already and, if they aren’t, logs them in. This informs Discourse of users’ info, even if…

This is probably the best place still to mention that there are cases when Discourse drives me absolutely nuts. I happen to have several “users” that are not real. Whether they are read-only accounts for a specific hidden category, anonymous beyond the capabilities of Discourse or whatever should n…

Why not use the sync_sso endpoint to fix all the emails via api?

Not sure what you mean by this. Are you talking about the setting “sso overrides email”? That would only take effect when/if the user actually logs in. So emails would still bounce while the email is wrong. If you are possibly talking about “POST admin endpoint /admin/users/sync_sso to synchronize…

[صورة] Peter_Backgren: The easiest way would be to allow a change to the email without authentication (at least for admins - or admins would have a choice). That would allow someone to hijack an admin’s account without their knowing. Though your edge case for users without access to email mak…

هل تريد تغيير البريد الإلكتروني لمستخدم SSO؟

الدعم تسجيل الدخول الموحد

putty (Derek Putnam) 9 سبتمبر 2024، 7:32م 38

عادةً ما أحتاج إلى تمكين emails_editable، ثم تعطيل auth_overrides_email، ثم تغيير البريد الإلكتروني.

الموضوع		الردود	مرات العرض
How to handle Discourse SSO when the authentication site allows users to change emails? SSO	4	1315	24 فبراير 2023
SSO and changing email addresses upstream Support	5	2498	20 أبريل 2021
Allow admins to change email addresses easily Feature	10	5341	26 أغسطس 2024
How to let moderators change email addresses? Support	17	1340	8 يونيو 2024
Single signon and email change Support	3	740	8 يونيو 2024

هل تريد تغيير البريد الإلكتروني لمستخدم SSO؟

الموضوعات ذات الصلة