Bug 53144 – Portal tile 'Login' is static and requires manual reconfiguration for Single Sign On

Bug 53144 - Portal tile 'Login' is static and requires manual reconfiguration for Single Sign On


Summary:	Portal tile 'Login' is static and requires manual reconfiguration for Single ...

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	Portal
Version:	UCS 5.0
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	UCS 5.0-0-errata
Assigned To:	UMC maintainers
QA Contact:	UMC maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2021-04-23 14:12 CEST by Erik Damrose
Modified:	2021-11-03 12:08 CET (History)
CC List:	3 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.114
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Erik Damrose

2021-04-23 14:12:05 CEST

The portal tile 'Login' contains a static link:

https://$server_fqdn/univention/login/?location=/univention/portal/

The link does not change when configuring the Portal for single sign on with ucr set portal/auth-mode=saml

We should at least document to which value the URL should be switched to support SSO logins. I think this is a frequent requirement. Ideally, the tile would contain some logic and detect the correct URL based on the portal configuration.

Comment 1 Ingo Steuwer

2021-04-28 09:54:24 CEST

We discussed this, idea (which needs to be implemented) is to provide two login tiles:

* an activated one for the "non-SAML" login
* a deactivated one with the SAML login

The documentation should be extended to describe how to switch to the SAML login and to change the active tile.