[OAK-4346] SyncMBeanImpl.syncExternalUsers doesn't check for foreign IDP

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.5.2, 1.6.0
• Component/s: auth-external
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 04/May/16 14:18
• Updated: 10/Nov/16 09:37
• Resolved: 11/May/16 12:55

Description

in the light of OAK-4264 i found that SyncMBeanImpl.syncExternalUsers doesn't verify that the given external-ids belong to the same IDP that the bean has been created for.

my expectation for the result-messages was an operation key for (FOREIGN) but instead the user might even be synchronized depending on the behavior of the IDP or result in nsi if the a given userID is (by coincidence) not known to the IDP.

Issue Links

• is related to: OAK-4264 Improve testing of SyncMBeanImpl