UI/API: Don't make password a mandatory parameter for the creation of LDAP/SAML account
- Dominant language
- Java
- Stars
- 3.1k
- Forks
- 1.4k
- Avg merge
- 6d 19h
- Merged PRs (30d)
- 32
Description
### The required feature described as a wish
Issue:
Currently, the password admin user sets for ldap and saml accounts during creation is useless, as the main authentication happens via ldap and saml servers
Since the password is set on the saml or ldap servers, and cloudstack mainly authenticates based on the global setting values of
ldap.username.attribute
saml2.user.attribute
The account/user creation form should not show the password section text box if the admin user wants to create ldap or saml account.
Contributor guide
Research direction
Start with the account/user creation form and the corresponding LDAP/SAML account-creation API paths. Verify how the password field becomes mandatory for these account types and check the ldap.username.attribute and saml2.user.attribute settings. Done means LDAP and SAML creation no longer displays or requires a password while other account types retain their current behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- api, authentication, frontend
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100