kiranchavala opened a new issue, #12595:
URL: https://github.com/apache/cloudstack/issues/12595

   ### problem
   
   Ldap imported accounts which are saml enabled doesn't fallback to ldap if 
saml is disabled
   
   ### versions
   
   ACS 4.23 Nightly 
   
   
   
   ### The steps to reproduce the bug
   
   
   
   1. Configure a LDAP and Import a LDAP account 
   
   <img width="1147" height="767" alt="Image" 
src="https://github.com/user-attachments/assets/a04bf70d-42e7-41c6-a38b-64f6cf702283";
 />
   
   2. Check the user type , its set to LDAP
   
   <img width="1465" height="419" alt="Image" 
src="https://github.com/user-attachments/assets/3e121982-b154-4533-82c0-a50c3004d61f";
 />
   
   3. Authorize SAML to the imported ldap account 
   
   <img width="1646" height="595" alt="Image" 
src="https://github.com/user-attachments/assets/7ef24f96-a04a-4d65-8b5e-b462973af6ea";
 />
   
   4.  The user type is assigned as SAML 
   
   <img width="1644" height="424" alt="Image" 
src="https://github.com/user-attachments/assets/611b0423-5d3f-4330-afbc-e88bd2a61a46";
 />
   
   5. Disable SAML SSO
   
   <img width="1445" height="600" alt="Image" 
src="https://github.com/user-attachments/assets/b38658b9-5def-4486-b05b-04dd3d118ca8";
 />
   
   6.  The user type is assigned as NATIVE TYPE 
   
   <img width="1639" height="529" alt="Image" 
src="https://github.com/user-attachments/assets/4630a3cb-15ed-46ca-908d-a7ec0150ee44";
 />
   
   
   7. The LDAP imported user is not able to login with LDAP credentials since 
the user type changes 
   
   
   made sure the setting 
   
   enable.login.with.disabled.saml is set to true 
   
   
   https://github.com/apache/cloudstack/pull/10868
   
   
   
   
   
   ### What to do about it?
   
   If the SAML authentication is disabled for a LDAP imported account.
   
   The user type should switch back to LDAP 
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to