Bug 51068

Summary:	The saml login should be able to check the email verification status
Product:	UCS	Reporter:	Jürn Brodersen <brodersen>
Component:	SAML	Assignee:	Jürn Brodersen <brodersen>
Status:	CLOSED FIXED	QA Contact:	Johannes Keiser <keiser>
Severity:	normal
Priority:	P5	CC:	botner
Version:	UCS 4.4
Target Milestone:	UCS 4.4-4-errata
Hardware:	Other
OS:	Linux
What kind of report is it?:	Feature Request	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:
Bug Depends on:
Bug Blocks:	51065

Description Jürn Brodersen

2020-04-06 11:10:00 CEST

The saml login should be able to check the email verification status

With the new feature bug 51065 for the self service to enable users to register their own account, a new ldap attribute was added which holds the verification status of the email address the user used.

The admin should be able to prohibit saml logins for accounts with unverified emails.

Comment 1 Jürn Brodersen

2020-04-06 18:13:11 CEST

[4.4-4 673abd0f1a] Bug #51068: Add email verification check
[4.4-4 de3c35768d] Bug #51068: Make email verification check configurable
[4.4-4 4b6d429b2e] Bug #51068: Test for saml email verification check
[4.4-4 4f477da5c9] Bug #51068: yaml
[4.4-4 91bb7477cc] Bug #51068: changelog

Package: univention-saml
Version: 6.0.2-30A~4.4.0.202004061810
Branch: ucs_4.4-0
Scope: errata4.4-4


Waiting for merge of bug 51067 to merge the docu commit

Comment 2 Jürn Brodersen

2020-04-06 23:35:37 CEST

[4.4-4 aafae25341] Bug #51068: docu

Comment 3 Jürn Brodersen

2020-04-06 23:45:39 CEST

[4.4-4 b6753ffb98] Bug #51068: yaml

Comment 4 Jürn Brodersen

2020-04-07 21:15:45 CEST

[4.4-4 445eef81f3] Bug #51068: email verification error can now be adjusted
[4.4-4 a1d5ab6654] Bug #51068: yaml


Package: univention-saml
Version: 6.0.2-32A~4.4.0.202004072110
Branch: ucs_4.4-0
Scope: errata4.4-4

Comment 5 Jürn Brodersen

2020-04-08 10:00:05 CEST

[4.4-4 8c4686b5c0] Bug #51068: docu

Comment 6 Jürn Brodersen

2020-04-08 10:17:32 CEST

json doesn't support comments:

[4.4-4 7608795f7c] Bug #51068: fix 03_ucr.63checkucrwarning

Comment 7 Johannes Keiser

2020-04-08 17:54:43 CEST

OK: warning is only shown for users with RegisteredThroughSelfService=TRUE
OK: saml/idp/selfservice/check_email_verification=true/false
OK: saml/idp/selfservice/account-verification/error-{title,descr}/.*
OK: doc
OK: yaml
-> verified

Comment 8 Felix Botner

2020-04-09 09:21:16 CEST

In jeknins

  82_saml.51_selfservice_email_verification.master090

fails

Comment 9 Jürn Brodersen

2020-04-09 10:03:48 CEST

(In reply to Felix Botner from comment #8)
> In jeknins
> 
>   82_saml.51_selfservice_email_verification.master090
> 
> fails

:(
Thanks! Forgot to change the expected error message

[4.4-4 ad62f165e8] Bug #51068: saml error message has changed

Comment 10 Johannes Keiser

2020-04-14 14:12:49 CEST

(In reply to Jürn Brodersen from comment #9)
> (In reply to Felix Botner from comment #8)
> > In jeknins
> > 
> >   82_saml.51_selfservice_email_verification.master090
> > 
> > fails
> 
> :(
> Thanks! Forgot to change the expected error message
> 
> [4.4-4 ad62f165e8] Bug #51068: saml error message has changed

OK: test ist green
-> verified

Comment 11 Erik Damrose

2020-04-15 14:32:14 CEST

<http://errata.software-univention.de/ucs/4.4/527.html>