Don't allow triggering a password reset for unenrolled users
Open
- Dominant language
- Rust
- Stars
- 2.8k
- Forks
- 115
- Avg merge
- 1d 4h
- Merged PRs (30d)
- 51
Description
Admin can currently start a password reset for a user who has not finished enrollment.
This leads to unexpected errors in the password reset process.
This is of course further complicated by external users. Should they be able to reset a password? We technically support using both an internal and LDAP password simultainously.
Contributor guide
Assessment
This issue has not been assessed yet.