[VCL-438] allow new users to be added to VCL when shibboleth authentication is used without LDAP

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.3
• Component/s: web gui (frontend)
• Assignee: Josh Thompson
• Reporter: Josh Thompson
• Created: 30/Mar/11 18:30
• Updated: 20/Feb/12 21:31
• Resolved: 20/Feb/12 21:31

Description

When using LDAP, users can be added to user groups even if they have not logged in to the site before because the userid can be validated using LDAP. This is not possible when Shibboleth is used without LDAP. It would be useful to go ahead and add the users to the database and set a flag that the user is not validated. Then, after some amount of time, if the user never logs in, the account can be expunged.