SAML2 : Cannot link existing user to IDP account
- Dominant language
- Python
- Stars
- 44.8k
- Forks
- 4.9k
- Avg merge
- 1d 5h
- Merged PRs (30d)
- 624
Description
### Self-Hosted Version
23.5.1
### CPU Architecture
x86_64
### Docker Version
24.0.1
### Docker Compose Version
2.18.1
### Steps to Reproduce
1) Create a user account (not admin) with an email address
2) Configure SAML Login to a generic SAML2 IDP (DUO Security)
3) Click on the link in the email:

4) Click on the `Login with SAML2` button
5) Login with IDP
### Expected Result
I expect to be able to login with my old account and link it to the IDP identity.
In our company, we have mail alias in the following format:
- `.@vnv.ch`
- `.@vnv.ch`
Using my e-mail, that would be m.pedretti@vnv.ch and mael.pedretti@vnv.ch.
If my sentry account is created with mael.pedretti@vnv.ch and the email in the IDP is m.pedretti@vnv.ch, I won't be able to link it.
The admin setting everything up can link any account to any IDP identity but not the end user if he is disconnected.
### Actual Result
A new account is created without ever asking to link account.

### Event ID
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.