microsoft
authentication flow loop when user needs to switch account.
We have found that when we have account creation disabled for the login process and users have multiple accounts, they can get stuck with the wrong account authenticating correctly and then being taken to the error page telling the user account creation is disabled.
For example if the one person has two accounts ([email protected] and [email protected]) if the login flow silently authenticates in the [email protected] account but this account does not exist in Moodle the use will be taken to a page showing the account creation error, but is not given any details to let them know that is was the [email protected] that authenticated.
Could the details for the currently authenticated account be displayed with the error message so the user can understand what account they have tried to login with.
An option to allow redirection to an identity selection page with an error letting the user know the currently authenticated identity does not have an account in the Moodle system would probably be a better option for the user so they could select the correct account.
This still causes issues - normally you could add ?prompt=select_account to the auth URL to force a selector but I think this is getting stripped with your setup, it would be good to allow that, maybe even have a checkbox for it?
