Bug 51068 - The saml login should be able to check the email verification status
The saml login should be able to check the email verification status
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: SAML
UCS 4.4
Other Linux
: P5 normal (vote)
: UCS 4.4-4-errata
Assigned To: Jürn Brodersen
Johannes Keiser
:
Depends on:
Blocks: 51065
  Show dependency treegraph
 
Reported: 2020-04-06 11:10 CEST by Jürn Brodersen
Modified: 2020-04-15 14:32 CEST (History)
1 user (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jürn Brodersen univentionstaff 2020-04-06 11:10:00 CEST
The saml login should be able to check the email verification status

With the new feature bug 51065 for the self service to enable users to register their own account, a new ldap attribute was added which holds the verification status of the email address the user used.

The admin should be able to prohibit saml logins for accounts with unverified emails.
Comment 1 Jürn Brodersen univentionstaff 2020-04-06 18:13:11 CEST
[4.4-4 673abd0f1a] Bug #51068: Add email verification check
[4.4-4 de3c35768d] Bug #51068: Make email verification check configurable
[4.4-4 4b6d429b2e] Bug #51068: Test for saml email verification check
[4.4-4 4f477da5c9] Bug #51068: yaml
[4.4-4 91bb7477cc] Bug #51068: changelog

Package: univention-saml
Version: 6.0.2-30A~4.4.0.202004061810
Branch: ucs_4.4-0
Scope: errata4.4-4


Waiting for merge of bug 51067 to merge the docu commit
Comment 2 Jürn Brodersen univentionstaff 2020-04-06 23:35:37 CEST
[4.4-4 aafae25341] Bug #51068: docu
Comment 3 Jürn Brodersen univentionstaff 2020-04-06 23:45:39 CEST
[4.4-4 b6753ffb98] Bug #51068: yaml
Comment 4 Jürn Brodersen univentionstaff 2020-04-07 21:15:45 CEST
[4.4-4 445eef81f3] Bug #51068: email verification error can now be adjusted
[4.4-4 a1d5ab6654] Bug #51068: yaml


Package: univention-saml
Version: 6.0.2-32A~4.4.0.202004072110
Branch: ucs_4.4-0
Scope: errata4.4-4
Comment 5 Jürn Brodersen univentionstaff 2020-04-08 10:00:05 CEST
[4.4-4 8c4686b5c0] Bug #51068: docu
Comment 6 Jürn Brodersen univentionstaff 2020-04-08 10:17:32 CEST
json doesn't support comments:

[4.4-4 7608795f7c] Bug #51068: fix 03_ucr.63checkucrwarning
Comment 7 Johannes Keiser univentionstaff 2020-04-08 17:54:43 CEST
OK: warning is only shown for users with RegisteredThroughSelfService=TRUE
OK: saml/idp/selfservice/check_email_verification=true/false
OK: saml/idp/selfservice/account-verification/error-{title,descr}/.*
OK: doc
OK: yaml
-> verified
Comment 8 Felix Botner univentionstaff 2020-04-09 09:21:16 CEST
In jeknins

  82_saml.51_selfservice_email_verification.master090

fails
Comment 9 Jürn Brodersen univentionstaff 2020-04-09 10:03:48 CEST
(In reply to Felix Botner from comment #8)
> In jeknins
> 
>   82_saml.51_selfservice_email_verification.master090
> 
> fails

:(
Thanks! Forgot to change the expected error message

[4.4-4 ad62f165e8] Bug #51068: saml error message has changed
Comment 10 Johannes Keiser univentionstaff 2020-04-14 14:12:49 CEST
(In reply to Jürn Brodersen from comment #9)
> (In reply to Felix Botner from comment #8)
> > In jeknins
> > 
> >   82_saml.51_selfservice_email_verification.master090
> > 
> > fails
> 
> :(
> Thanks! Forgot to change the expected error message
> 
> [4.4-4 ad62f165e8] Bug #51068: saml error message has changed

OK: test ist green
-> verified
Comment 11 Erik Damrose univentionstaff 2020-04-15 14:32:14 CEST
<http://errata.software-univention.de/ucs/4.4/527.html>