FeatureFuel
5

Use "name" claim in OIDC SSO for display name

Source: dani-garcia/vaultwarden#7359 · opened by @RaphaelRoumezin
When creating a user from SSO, the code uses the OIDC claim "preferred_username" for the username, which is usually more of a login username than a display name, which is more how vaultwarden uses it. Entra ID, for instance, uses UPN, which might just be the email address.


The OIDC spec indicates the field "name" as more fitting for a display name:


So we could either:
• Use the "name" claim in the code, with "preferred_username" as a fallback
• Make a config field to set the claim to be used for username definition

Feel free to comment you insights on this idea.

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests