getsentry / getsentry/sentry

SSO misconfiguration - wrong redirection after successful login with root credentials

Open
#41,601 5 comments 1 reaction 0 assignees View on GitHub
Bug
Dominant language
Python
Stars
44.8k
Forks
4.9k
Avg merge
1d 5h
Merged PRs (30d)
624

Description

### Environment

SaaS ([https://sentry.io/]())

### Version

Latest

### Steps to Reproduce

1. Create a personal account
2. Create an organization
3. Configure SSO for organization, eg.: Google SSO
4. Remove/lost SSO configuration (eg.: remove SSO configuration from your GCP account / AWS Cognito)
5. Login with your root credentials to your account.
6. XYZ (organization) requires signing in with Google.

### Expected Result

The user should be able to access the root account and be able to remove the impacted organization from its own account.

### Actual Result

After successful login with credentials (user/password) [Sentry.io]() is redirecting to `auth/login/XYZ/?next=%2Forganizations%2FXYZ%2Fissues%2F` .

It is a misconfiguration and egg-chicken issue.
After removing the SSO configuration in AWS / GCP, you cannot log in to your account because of redirection.
The same issue can happen in the case of changing employers. After leaving typically you can't access your corporate email, which results in blocked access to the root account.

image

**NOTE:** It is my own organization created and destroyed during Terraform destroy process.
I can't access the account, I can't use the previous configuration/state.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.