Use "name" claim in OIDC SSO for display name #7359
RaphaelRoumezin
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
When creating a user from SSO, the code uses the OIDC claim "preferred_username" for the username, which is usually more of a login username than a display name, which is more how vaultwarden uses it. Entra ID, for instance, uses UPN, which might just be the email address.
vaultwarden/src/sso.rs
Line 291 in d6a3d53
The OIDC spec indicates the field "name" as more fitting for a display name:
https://openid.net/specs/openid-connect-core-1_0.html#Claims
So we could either:
Beta Was this translation helpful? Give feedback.
All reactions