3
Allow magic link login even if the email is enrolled with an SSO provider
Source: outline/outline#3660 · opened by @vpukhanov
Hey folks.
At our company we are self-hosting Outline with Slack and Magic Link authentication providers enabled. We're currently migrating off of Slack, but would like for both auth methods to be available in the interim.
Our problem was that if the email was enrolled in Outline via Slack provider, even if the user selects the email authentication, they get redirected to Slack to authenticate there. Here's the code that enforces this behavior:
We have changed this in our fork of Outline, and we would be interested in bringing this change to upstream. I propose introducing a new environment variable PREFER_SSO_OVER_EMAIL_AUTH with the default value of true to keep the current behavior intact. If this is set to false, Outline would allow signing in via email even if it is enrolled with an SSO provider.
Would you be interested in accepting a pull request with this change?
At our company we are self-hosting Outline with Slack and Magic Link authentication providers enabled. We're currently migrating off of Slack, but would like for both auth methods to be available in the interim.
Our problem was that if the email was enrolled in Outline via Slack provider, even if the user selects the email authentication, they get redirected to Slack to authenticate there. Here's the code that enforces this behavior:
We have changed this in our fork of Outline, and we would be interested in bringing this change to upstream. I propose introducing a new environment variable PREFER_SSO_OVER_EMAIL_AUTH with the default value of true to keep the current behavior intact. If this is set to false, Outline would allow signing in via email even if it is enrolled with an SSO provider.
Would you be interested in accepting a pull request with this change?
No pledges yet. Be the first to back this.
Comments
Similar requests
Assign users to groups based on SSO-provided information
23 votes · 0 comments
Generic SAML Login Provider
3 votes · 0 comments
Config Option to forward login to /auth/oidc instead of the normal login screen.
3 votes · 0 comments
email & password/non-company google login
2 votes · 0 comments
Use groups from OpenID Connect SSO provider
39 votes · 0 comments
No comments yet.