getsentry / getsentry/sentry

SSO Bypass

Open
#80,548 8 comments 1 reaction 0 assignees View on GitHub
Feature Product Area: Settings - Auth
Dominant language
Python
Stars
44.8k
Forks
4.9k
Avg merge
22h 21m
Merged PRs (30d)
586

Description

### Problem Statement

In other products you can bypass SSO if you make a mistake or something changes in the infrastructure. However in Sentry their appears to be no documented way to bypass this.

User story:

Developers schedule a change on ADFS cert for public key roll over
Sentry admin updates production but forgets to update test system
Developers roll over certificate on ADFS system
Sentry test user unable to log in and correct issue after the session has expired

### Solution Brainstorm

API to hit with a top level administrators details that can disable the SSO check and use the password.
A value that can be placed in the sentry.conf file and a new install run to delete/disable the SSO component

Yes this does present a slight security issue however a user would require a top level account or access to the server

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.