Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-140513

Undesirable redirection upon SP rejection of IDP authenticated user

    Details

    • Type: Bug
    • Status: Open
    • Resolution: Unresolved
    • Affects Version/s: Master
    • Fix Version/s: None
    • Labels:
      None

      Description

      1. Update portal-ext.properties: auth.login.prompt.enabled=true (older version may not have this property, which is ok)
      2. Restart portal for this to take effect
      3. Configure two virtual portal instances as SAML SP & IDP
      4. Check the "Unknown Users Are Strangers" checkbox on the SP's IDP connection
      5. Go to Instance Settings > User Authentication, and then uncheck "Allow strangers to create accounts?"
      6. On the IDP, create a new user
      7. As guest, on the SP, request the following control panel URL (change the host name to match your virtual portal instance's): http://liferaysamlsp.com:8080/group/guest/~/control_panel/manage?p_p_id=com_liferay_saml_web_internal_portlet_SamlAdminPortlet
      8. Log in with the new user on the IDP when prompted

      Expected result: You are returned to the SP where an error message is displayed stating that strangers are not allowed
      Actual result: An infinite redirection loop happens because the control panel is a private page that will re-trigger the SSO process

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              support-lep@liferay.com SE Support
              Reporter:
              stian.sigvartsen Stian Sigvartsen
              Participants of an Issue:
              Recent user:
              Nóra Szél
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Days since last comment:
                7 weeks, 1 day ago

                  Packages

                  Version Package