You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In a scenario of mixed accounts (some local, some from SAML, or with accounts authenticated ), it is often desirable to have a two-step login: first ask for e-mail/username, then decide whether the user is local (ask for password) or should be authenticated via SAML.
In this last case, user sometimes needs to type his e-mail/username again. Is it possible to send a username to the IDP? The Subject element of AuthNRequest seems to be the way to go, but I don't see anyway to provide this info down the chain to the AuthNRequest constructor. Did I miss something?
Thanks!
The text was updated successfully, but these errors were encountered:
jcaron23
changed the title
Is it possible to provide a hint of the user to authenticate (subject / named) to the IDP?
Is it possible to provide a hint of the user to authenticate (subject / nameId) to the IDP?
Oct 21, 2020
Hi,
In a scenario of mixed accounts (some local, some from SAML, or with accounts authenticated ), it is often desirable to have a two-step login: first ask for e-mail/username, then decide whether the user is local (ask for password) or should be authenticated via SAML.
In this last case, user sometimes needs to type his e-mail/username again. Is it possible to send a username to the IDP? The
Subject
element ofAuthNRequest
seems to be the way to go, but I don't see anyway to provide this info down the chain to theAuthNRequest
constructor. Did I miss something?Thanks!
The text was updated successfully, but these errors were encountered: