2
Change email via SSO without user interaction
Source: dani-garcia/vaultwarden#7577 · opened by @sistason
The email is used by Bitwarden for salting the Master Key. Therefore, it can only be changed by providing the Master Passphrase. As #7468 mentions, during SSO-login (which normally updates the app-data from the SSO-claims) the user gets notified about a changed email and is prompted to change their mail in their profile. For our setup, we disabled Vaultwarden mail configuration, to be able to auto-invite our SSO-users via the API, which they would otherwise have to accept but a users group in SSO is 1to1 with its users Orgs in Vaultwarden, so disabling mail was the only way we found to automate putting users in Vaultwarden-organisations. This sadly means that we cannot send the email-change email prompt, so users will never be notified (and will never change their mail). Do people integrate Vaultwarden differently in their SSO-setup here? What would be your tips to solve: 1. Mail disabled so that invite-confirms happens automatically 2. Mail-change prompt cannot be sent 3…
No pledges yet. Be the first to back this.
Comments
Similar requests
SSO login flow requires redundant email input before IdP redirect
3 votes · 0 comments
Force accounts to sign in using SSO only while retaining non-SSO logins.
1 vote · 0 comments
Feature: Auto-provision new users on first SSO login (no manual admin invite required)
1 vote · 0 comments
Default organization flow for `SSO_ONLY`
5 votes · 0 comments
Move SSO_CLIENT_SECRET to the Read Only Admin Panel or Encrypt it
1 vote · 0 comments
No comments yet.