This commit is contained in:
peintnermax
2024-09-13 15:04:54 +02:00
parent 46074b62f2
commit 28b50ca64a

View File

@@ -75,6 +75,6 @@ If no single IDP is set, we check for `loginSettings.allowUsernamePassword` and
If no previous condition is met we throw an error stating the user was not found. If no previous condition is met we throw an error stating the user was not found.
**EXCEPTIONS**If the outcome after this order produces a no authentication methods found, or user not found, we check whether `loginSettings?.ignoreUnknownUsernames` is set to `true` as in this case we redirect to the /password page regardless (to not leak information about a registered user). **EXCEPTIONS:** If the outcome after this order produces a no authentication methods found, or user not found, we check whether `loginSettings?.ignoreUnknownUsernames` is set to `true` as in this case we redirect to the /password page regardless (to not leak information about a registered user).
> NOTE: We ignore `loginSettings.allowExternalIdp` as the information whether IDPs are available comes as response from `getActiveIdentityProviders(org?)`. > NOTE: We ignore `loginSettings.allowExternalIdp` as the information whether IDPs are available comes as response from `getActiveIdentityProviders(org?)`.