[SYNCOPE-1146] On-the-fly creation of unmatched users logging via SAML 2.0

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.5, 2.1.0
• Component/s: extensions
• Labels: saml
• Assignee: Francesco Chicchiriccò
• Reporter: Francesco Chicchiriccò
• Created: 04/Jul/17 11:59
• Updated: 04/Sep/17 09:10
• Resolved: 03/Aug/17 15:56

Description

As per the current implementation, when logging into the Admin Console via SAML 2.0, an internal user matching the configured attribute of the Authentication Assertion is looked up.
If not found, an error is raised.

Things could be configured, however, to create on-the-fly an internal user with the attributes provided by the Authentication Assertion, and to let them log in.

Issue Links

• relates to: SYNCOPE-1148 SAML-initiated self-registration