SSO Bypass
- Dominant language
- Python
- Stars
- 44.8k
- Forks
- 4.9k
- Avg merge
- 22h 21m
- Merged PRs (30d)
- 586
Description
### Problem Statement
In other products you can bypass SSO if you make a mistake or something changes in the infrastructure. However in Sentry their appears to be no documented way to bypass this.
User story:
Developers schedule a change on ADFS cert for public key roll over
Sentry admin updates production but forgets to update test system
Developers roll over certificate on ADFS system
Sentry test user unable to log in and correct issue after the session has expired
### Solution Brainstorm
API to hit with a top level administrators details that can disable the SSO check and use the password.
A value that can be placed in the sentry.conf file and a new install run to delete/disable the SSO component
Yes this does present a slight security issue however a user would require a top level account or access to the server
Contributor guide
Assessment
This issue has not been assessed yet.