Incorrect mapping of user accounts to Active Directory (AD)

[tanyaastreika]

Severity

No response

Version

2024.3.12932

Latest Version

I could not reproduce the problem

What happened?

When a new user logs into the app for the first time using Active Directory authentication, they may be incorrectly linked to an existing Octopus user if that user was previously deleted from Active Directory.

Reproduction

Steps:

1. Create two users in Active Directory: customDomain\user1 and customDomain\user2.
2. Enable Active Directory authentication (Authentication Scheme = Negotiate, Allow Auto User Creation = true).
3. Log in to the app with customDomain\user1 using the form (not "Sign in with domain account").
4. Delete customDomain\user1 from Active Directory.
5. Log in to the app with customDomain\user2 using the form (not "Sign in with domain account"). After login, customDomain\user2 will be incorrectly linked to user1.

Error and Stacktrace

No response

More Information

Affected customer [Internal Link]

Workaround

No response