You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The authentication manager takes a strong assumption on the preferred_username.
It requires this claim to be present and unique. Which both isn't safe to assume.
Some OIDC providers, such as google, do not provide this claim.
Specification
Extend the configuration options on the oidc providers to allow to specify the claim which should be used for the agents username.
This might be inspired by the parameters requested by synapse.
Finalised state
Login with other identity providers than keycloak should be possible.
The text was updated successfully, but these errors were encountered:
Motivation
The authentication manager takes a strong assumption on the
preferred_username
.It requires this claim to be present and unique. Which both isn't safe to assume.
Some OIDC providers, such as google, do not provide this claim.
Specification
Extend the configuration options on the oidc providers to allow to specify the claim which should be used for the agents username.
This might be inspired by the parameters requested by synapse.
Finalised state
Login with other identity providers than keycloak should be possible.
The text was updated successfully, but these errors were encountered: