appsmith
appsmith copied to clipboard
appsmithorg
[Feature]: Remove the account update screen for SAML
Is there an existing issue for this?
- [X] I have searched the existing issues
Summary
When a user first logs into the instance they are presented with an Update Account Info screen. I would like to disable this feature for my users.
Why should this be worked on?
The account info should be pulled from our SSO provider instead.
We would also like to see this feature. It's confusing for our users, especially the UID value that gets populated in the Username field.
If the user changes the email in that screen, they will not be able to login afterwards, and there seems to be no way for the admin to fix this. (Recreating the user on the appsmith side produces same error, its like the incorrect email gets cached or stored in the background, I think it might be related to the 'sync mode' setting on the SAML config in keycloak).
@mmcallister-selkirk can you share a video of this issue? If a user signs up with SSO they should not see any screen with account information
Hi @Nikhil-Nandagopal, the first video shows the initial login, after adding a new user to the AD group and in Appsmith. The second video shows the second login attempt, and the error that appears has the bad password that was entered in the 'Update Account Information' window. This instance is 1.9.35 so maybe its already been fixed?
https://github.com/appsmithorg/appsmith/assets/121312970/d9a53f46-d7cd-451b-ac7c-68fb0c45f73d https://github.com/appsmithorg/appsmith/assets/121312970/9cd60599-a2f5-4585-b0b3-47a04300be86
@mmcallister-selkirk thanks for the info! We'll look into prioritising this.
Hi @Nikhil-Nandagopal, I tested again on 1.9.60 and saw the same 'Update Account Information' screen on initial login. Thanks for looking at this!
Hey I did this and it worked.
- Get keycloak credentials
* exec into the docker container with
docker exec -it -u root appsmith bash*cat /appsmith-stacks/configuration/docker.env | grep -i keycloakmake a note of the credentials visit https://<domain_name>/auth login with the credentials noted in the previous step * Select appsmith realm as shown in the picture <OrangeMarker> * Select user profile and Delete firstName and lastName as shown <BlueMarker> and going forward any new user who signs up with SAML SSO will not be asked for firstname and lastName
@pratapaprasanna - In your config, will the screen not be shown at all or only will it be still shown for the userName (email) field?
