sqlpad
sqlpad copied to clipboard
SAML deny login if role claim is not set
Hello,
I've been testing the SAML feature. I have enabled the auto user creation feature, because I need it, but I noticed that if the user doesn't have a role assigned in the SAML claims, he can still be able to login as editor. Ideally if not role is set, the login should fail by security measures. Thanks
Adding, out of curiosity I tried setting the following variable SQLPAD_SAML_DEFAULT_ROLE to 'none' but the app crashed. In the logs I see an unexpected error, role not supported.
For info the following is set as such: SQLPAD_SAML_AUTO_SIGN_UP = true SQLPAD_SAML_ENFORCED_ROLE = true