apache / apache/cloudstack

UI/API: Don't make password a mandatory parameter for the creation of LDAP/SAML account

Open
#12,039 2 comments 0 reactions 0 assignees View on GitHub
component:api component:LDAP component:saml component:UI status:needs-functional-definition type:enhancement type:improvement
Dominant language
Java
Stars
3.1k
Forks
1.4k
Avg merge
6d 19h
Merged PRs (30d)
32

Description

### The required feature described as a wish

Issue:

Currently, the password admin user sets for ldap and saml accounts during creation is useless, as the main authentication happens via ldap and saml servers

Since the password is set on the saml or ldap servers, and cloudstack mainly authenticates based on the global setting values of

ldap.username.attribute
saml2.user.attribute

The account/user creation form should not show the password section text box if the admin user wants to create ldap or saml account.

Image
Image

Contributor guide

Open the contributing guide

Research direction

Start with the account/user creation form and the corresponding LDAP/SAML account-creation API paths. Verify how the password field becomes mandatory for these account types and check the ldap.username.attribute and saml2.user.attribute settings. Done means LDAP and SAML creation no longer displays or requires a password while other account types retain their current behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
api, authentication, frontend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.