Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SAML_LOGIN_ENABLED behavior reflect correct state if SAML details are provided through env variables. #5887

Open
johnny-zhong-nextroll opened this issue Jan 25, 2023 · 2 comments

Comments

@johnny-zhong-nextroll
Copy link

Issue Summary

SAML login button disabled when 1 set of SAML login details are provided. This seems to be incorrect due to needing only 1 set. In fact, the options for SAML are radio, indicating that only 1 set is necessary for SAML to work.

Steps to Reproduce

  1. Use environment variables to set up SAML. Only provide SAML_METADATA_URL, SAML_ENTITY_ID, SAML_NAMEID_FORMAT
  2. See that the saml login button is not present.

This is a bug because for SAML login to function, we do not require both SAML_SSO_URL and SAML_METADATA_URL to be present. Only 1 needs to be provided with the proper SAML_LOGIN_TYPE.

Technical details:

  • Redash Version: 10.1.0
  • Browser/OS: n/a
  • How did you install Redash: self-hosted
@ism-k
Copy link
Contributor

ism-k commented Feb 22, 2023

Perhaps a future release with a bug fix in this pull-request will resolve your issue:
#5784

@arikfr
Copy link
Member

arikfr commented Apr 3, 2023

This is not related to the issue, but I assume that the issue author or followers might have SAML enabled for their deployment and should be aware of the following Security Advisory: #5961. This affects all Redash versions and should be patched immediately.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants