5
Use "name" claim in OIDC SSO for display name
Source: dani-garcia/vaultwarden#7359 · opened by @RaphaelRoumezin
When creating a user from SSO, the code uses the OIDC claim "preferred_username" for the username, which is usually more of a login username than a display name, which is more how vaultwarden uses it. Entra ID, for instance, uses UPN, which might just be the email address.
The OIDC spec indicates the field "name" as more fitting for a display name:
So we could either:
• Use the "name" claim in the code, with "preferred_username" as a fallback
• Make a config field to set the claim to be used for username definition
Feel free to comment you insights on this idea.
The OIDC spec indicates the field "name" as more fitting for a display name:
So we could either:
• Use the "name" claim in the code, with "preferred_username" as a fallback
• Make a config field to set the claim to be used for username definition
Feel free to comment you insights on this idea.
No pledges yet. Be the first to back this.
Comments
Similar requests
Feature Request: Map OIDC group claims to Collections (post-authentication)
9 votes · 0 comments
Change email via SSO without user interaction
2 votes · 0 comments
Fetch and display user profile photos from SSO Providers (Microsoft Entra / OIDC) in Admin Dashboards
1 vote · 0 comments
Feature: Auto-provision new users on first SSO login (no manual admin invite required)
1 vote · 0 comments
Default organization flow for `SSO_ONLY`
5 votes · 0 comments
No comments yet.