Uploaded image for project: 'mod-login-saml'
  1. mod-login-saml
  2. MODLOGSAML-104

SSO settings (configured with user property "Email") always fail to find user by email

    XMLWordPrintable

Details

    • CP: sprint 127
    • 1
    • Core: Platform
    • OTHER

    Description

      Overview:

      The following issue was observed in an Iris Hotfix-1 environment (note - we upgraded mod-login-saml to mod-login-saml-2.1.2 due to issues noted MODLOGSAML-97)

      When SSO settings are configured to use User Property "Email"

      POST request to /saml/callback?client_name= always fails with 400 error and message "No user found by email = 'users email address'"

      From logs, found that attempt is being made to locate the user with the following request to users
      GET <okapi>/users?query=email=='users email address' which will always return 0 results

      The request should instead look up as follows
      GET <okapi>/users?query=personal.email=='users email address'

      https://github.com/folio-org/mod-login-saml/blob/a329903f5cc140a6c7c8b6d2c4f4526eb9bc492e/src/main/java/org/folio/rest/impl/SamlAPI.java#L210

      Steps to Reproduce:
      Configure SSO settings to use User Property "Email"

      Expected Results:
      Users are looked up by mod-login-saml by email in mod-users
      Actual Results:
      Users are not found and a status 400 is returned
      Additional Information:
      URL:
      Interested parties:

      TestRail: Results

        Attachments

          Issue Links

            Activity

              People

                adam Adam Dickmeiss (Inactive)
                cgodfrey Carole Godfrey
                Votes:
                0 Vote for this issue
                Watchers:
                8 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  TestRail: Runs

                    TestRail: Cases