Flagsmith / Flagsmith/flagsmith
Possible to create non-SSO users via API
Open
api
improvement
- Dominant language
- Python
- Stars
- 6.6k
- Forks
- 567
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 121
Description
Where an organisation is configured to only allow signing in via SSO, `https://api.flagsmith.com/api/v1/auth/users/` can be used to create a non SSO-users that can then be used to access the API.
We should not allow API user creation if the organisation is configured in that manner.
Contributor guide
Assessment
This issue has not been assessed yet.