Skip to content

Commit 710589e

Browse files
committed
feat: Add the possibitily to not authorize the login against the external store - EXO-67969 - Meeds-io/meeds#1417
In some case, when the platform is configured with an external user store AND SSO like OIDC, the IDP have security rules for the login like MFA. But, as the user is present in the external store, he can logs with the eXo login form, bypassing security rules This commit add a property to refused the connection for a user in the external store by the exo login form. He have to use the IDP login form
1 parent f27e428 commit 710589e

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

exo.core.component.organization.api/src/main/java/org/exoplatform/services/organization/externalstore/IDMExternalStoreService.java

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,10 +56,12 @@ public interface IDMExternalStoreService {
5656

5757
public static final String USER_PROFILE_ADDED_FROM_EXTERNAL_STORE = "exo.idm.externalStore.user.profile.new";
5858

59+
public static final String AUTHORIZE_LOGIN_PARAM = "exo.idm.externalStore.authorizelogin";
60+
5961
/**
6062
* Authenticates user using external store only
6163
*
62-
* @param username
64+
* @param usernamece
6365
* @param password
6466
* @return
6567
* @throws Exception

0 commit comments

Comments
 (0)