I lost my admin rights due to misconfigured SSO

SSO
1

Hello,
I give a user admin priveleges by rake admin:create, but when he logout from discourse he lost his admin priveleges ?

2 Likes
2

That sounds wrong, using rake admin:create to grant privileges should be permanent. Are you sure they were not an admin after logging in?

4 Likes
3

I check my privileges after logging in is reset it to normal user.

4

When running the rake admin:create task, the user you create should be granted admin status if you enter Y to the “Do you want to grant Admin privileges to this account?” question.

One thing that could cause the user to lose admin status after logging back in would be if they are logging in via SSO and you are passing the admin SSO parameter with its value set to false.

8 Likes
5

Thank you, I checked we are using the SSO authentification.

6

I’ve been having this problem as well with my SSO. Is the only way around this for the SSO to have an option for the user to be an admin so this parameter gets passed on correctly? I’m using Memberful so I can put in a request with them, just curious if that’s the best answer.

7

Yup! That sounds about right, see:

1 Like
8

The admin parameter is not required in the SSO payload, but if it is set it will cause the user to lose or gain admin status. From what I remember, Memberful passes the admin SSO parameter. You can probably set a user’s admin status through the Memberful UI. If you cannot find where to do that you should contact Memberful.

3 Likes
10

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.