cf login without --sso fails

[sharms]

Command

cf login
cf login --sso

CLI Version

cf version 6.15.0+fa1bfe2-2016-01-13

Error

'cf login' fails to login, but works with 'cf login --sso'.

The API server should have a 'default_authenication_method' that can be set to SSO. Currently every single cf client continually has to add '--sso' every time they log in.

CC API Endpoint Version

API endpoint: https://api.cloud.gov (API version: 2.53.0)

[cf-gitbot]

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/121533689

The labels on this github issue will be updated when the story is started.

[dkoper]

Hi @sharms

Sounds like a feature request for the API server, not for the CLI team?
Can you submit it to https://github.com/cloudfoundry/cloud_controller_ng/issues instead and the CLI team will add support once the backend supports it?

Cheers,
Dies Koper
CF CLI PM

[dkoper]

As discussed on the uaa channel on Slack, the CLI reads login.endpoint/login, and could possibly be enhanced to assume --sso when the passcode field is there and the username and password fields are not:

{
    "prompts": {
        "username": ["text", "Email"],
        "password": ["password", "Password"],
        "passcode": ["password", "One Time Code ( Get one at https://login.cloud.gov/passcode )"]
    }
}

This would mean of course that the passcode would become the only way of authentication.
If that's acceptable, as this requires UAA to allow you to suppress those fields, please submit an enhancement request to their tracker and reopen this one with a link so we can try to align our change with theirs.

[Abiwax]

for IBM Bluemix, i noticed cf login --sso issue started happening when bluemix was integrated with SSO, users who created bluemix after the integration cannot login using the normal cf login command but users prior to the sso can login without using --sso command, but when using the normal cf login command, the password to use must be the last password used before SSO was integrated and not the password that SSO uses if the password is not the same.

[rupam999]

Still I am getting

{"error":"invalid_grant","error_description":"User authentication failed: Unauthorized"}

When trying
cf login without --sso fails