As an Instance Administrator, I do not want error messages to suggest actions I cannot carry out

• Type: Story
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: 7.3.10 DXP GA1, Master
• Component/s: Application Security > SAML
• Labels:
  • 7.3-must
  • NAT
  • fc_20_06
  • has_acceptance_criteria
• Epic Link: SAML in SaaS
• Sprint: Iteration 33, Iteration 34, Iteration 35, Iteration 36, Iteration 37, Iteration 38, Iteration 39, Iteration 40, Iteration 41
• Git Pull Request: https://github.com/csierra/liferay-portal/pull/758

Description

With LPS-105165 we introduced meaningful error messages that suggest corrective step actions that only an omni-admin can carry out.

Whilst this is a great default for the product, it does not make sense in a SaaS environment running a shared portal installation, where portal instance admins do not have access to the default portal instance and are not omni-admin.

How to test the solution

The new /modules/saas/apps/saml-saas module must be deployed manually because it is not bundled in a standard portal build.

Acceptance Criteria

1. As a Portal-Wide Administrator, I want to have clear messages at the SAML configuration to Instance Administrators about that when the opportunity to configure the portal as an IdP has been removed on portal system level.
2. As a Portal-Wide Administrator, I want to have clear messages at the SAML configuration to Instance Administrators about what actions the Instance Administrator can take when the opportunity to configure the portal as an IdP has been removed on portal system level.