getsentry / getsentry/sentry

Account linking for a org forking from US to EU region with SSO requires all users to recover their password

Open
#88,065 3 comments 0 reactions 0 assignees View on GitHub
Product Area: Settings - Auth
Dominant language
Python
Stars
44.8k
Forks
4.9k
Avg merge
22h 21m
Merged PRs (30d)
586

Description

### Problem Statement

Currently account linking for a organisation fork from US to EU region with SSO is painful, as hundreds of users need to reset their password to link their accounts.

The current situation is that the US org has provisioned members through their SSO -> Then in the EU org these members are forked and saved as Email/Password because the SSO integration has to be setup again. -> Once these users try to login, sentry will prompt that there are 2 accounts and in order for us to merge them they'll need to fill in a password. (which they don't have)

I foresee that this will happen to any customer that is moving from US -> EU org with SSO or the other way around for that matter.

### Solution Brainstorm

We need a permanent fix for this!

For now there is a workaround would be available right now:
- For the user to go through Password forgotten and reset their password to make claim to the account and merge the accounts together. This only needs to happen once.

### Product Area

Settings - Auth

Contributor guide

Open the contributing guide

Research direction

Start by tracing the Settings - Auth account-linking flow for users provisioned through SSO and forked between US and EU organizations. Confirm the desired permanent behavior for merging duplicate Email/Password and SSO accounts without requiring password recovery; no files or tests are named in the issue.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.