This commit is contained in:
peintnermax
2024-09-13 15:04:54 +02:00
parent 46074b62f2
commit 28b50ca64a

View File

@@ -75,6 +75,6 @@ If no single IDP is set, we check for `loginSettings.allowUsernamePassword` and
If no previous condition is met we throw an error stating the user was not found.
**EXCEPTIONS**If the outcome after this order produces a no authentication methods found, or user not found, we check whether `loginSettings?.ignoreUnknownUsernames` is set to `true` as in this case we redirect to the /password page regardless (to not leak information about a registered user).
**EXCEPTIONS:** If the outcome after this order produces a no authentication methods found, or user not found, we check whether `loginSettings?.ignoreUnknownUsernames` is set to `true` as in this case we redirect to the /password page regardless (to not leak information about a registered user).
> NOTE: We ignore `loginSettings.allowExternalIdp` as the information whether IDPs are available comes as response from `getActiveIdentityProviders(org?)`.