sqlpad icon indicating copy to clipboard operation
sqlpad copied to clipboard

SAML deny login if role claim is not set

Open ar3thien opened this issue 3 years ago • 1 comments

Hello,

I've been testing the SAML feature. I have enabled the auto user creation feature, because I need it, but I noticed that if the user doesn't have a role assigned in the SAML claims, he can still be able to login as editor. Ideally if not role is set, the login should fail by security measures. Thanks

ar3thien avatar Jul 21 '22 21:07 ar3thien

Adding, out of curiosity I tried setting the following variable SQLPAD_SAML_DEFAULT_ROLE to 'none' but the app crashed. In the logs I see an unexpected error, role not supported.

For info the following is set as such: SQLPAD_SAML_AUTO_SIGN_UP = true SQLPAD_SAML_ENFORCED_ROLE = true

ar3thien avatar Jul 22 '22 04:07 ar3thien