Custom fields with different types can mapped onto each other

• Type: Bug
• Status: Open
• Resolution: Unresolved
• Affects Version/s: Master
• Fix Version/s: None
• Component/s: Application Security > SAML
• Labels:
  • 7.4-known-issues
  • appsec-qa
  • liferay-ga10-ce-743
  • liferay-ga11-ce-743
  • liferay-ga12-ce-743
  • liferay-ga13-ce-743-known-issue
  • liferay-ga14-ce-743-known-issues
  • liferay-ga9-ce-743
• Fix Priority: 3

Steps to reproduce:

1. Create a virtual instance: www.able.com
2. Add an Input Field with the name of inputField, as custom field in localhost
3. Add a Date Picker with the name of datePicker, as custom field in www.able.com
4. Create a SAML link between localhost as the IdP and www.able.com as the SP
5. Make sure localhost sends the value of Input Field: expando:inputField
6. Make sure in www.able.com inputField is mapped on datePicker: datePicker:inputField
7. Create a user in localhost with inputField filled out: text
8. Log into www.able.com as the newly created user

Actual result: User logs in, no error displayed, datePicker value does not update.
Expected result: User can't log in as there is a type mismatch between the mapped custom fields OR User can log in, but there is a warning in the logs of the mismatch and datePicker is not updated OR Instance admin can't save custom field mapping with different types.

No error displayed:

2021-11-09 07:47:22.436 DEBUG [http-nio-8080-exec-2][WebSsoProfileImpl:809] SAML authenticated user [email protected]
2021-11-09 07:47:22.436 DEBUG [http-nio-8080-exec-2][DefaultUserResolver:80] Resolving user with name ID format urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress and value [email protected]
2021-11-09 07:47:22.437 DEBUG [http-nio-8080-exec-2][DynamicUserFieldExpressionResolver:62] Dynamically resolved with user identifier expression: emailAddress
2021-11-09 07:47:22.437 DEBUG [http-nio-8080-exec-2][DefaultUserResolver:263] User identifier expression is mapped to SAML attribute value "[email protected]"
2021-11-09 07:47:22.437 DEBUG [http-nio-8080-exec-2][DefaultUserResolver:365] Matched known subject name identifier [email protected] of subject name format urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress with subject name qualifier "null" for SAML IDP entity ID localhost
2021-11-09 07:47:22.437 DEBUG [http-nio-8080-exec-2][DefaultUserResolver:386] Updating user 45300 with attributes map {firstName=[All], lastName=[User], inputField=[thisIsAStringValue], emailAddress=[[email protected]], screenName=[alluser], uuid=[2bcf94b9-8fcf-d82c-4155-50d0d6058c43]}