Uploaded image for project: 'RH-SSO'
  1. RH-SSO
  2. RHSSO-1930

Incorrect username logged for federated accounts

XMLWordPrintable

    • False
    • None
    • False
    • +
    • Hide
      1.  Attempt to login with invalid username (non-existing user)
      2.  After the authentication error, perform a login with configured external identity provider.
      3.  In the Events tab LOGIN_ERROR event details show the username from the invalid user (dummyuser) and the LOGIN event details show the same invalid username (dummyuser) instead of the correct username of the existing user. The correct username is shown under the "identity_provider_identity", but username shows incorrect user (dummyuser):

       

       2/22/22
      10:21:05 AM LOGIN   
      
          Client  app-authz-jee-vanilla
          User    6725aeb3-7df5-4515-b968-9bb274a38a0b
          IP Address  127.0.0.1
      Details 
          identity_provider   github
          redirect_uri    http://localhost:8080/app-authz-vanilla
          consent no_consent_required
          identity_provider_identity  correctUsername
          code_id 096d5400-a12d-4200-a793-5384942b595f
          username    dummyuser
      
      2/22/22
      10:20:54 AM LOGIN_ERROR 
      
           Client app-authz-jee-vanilla
           User   
           IP Address 127.0.0.1
           Error  invalid_user_credentials
      Details 
           auth_method    openid-connect
           auth_type  code
           redirect_uri   http://localhost:8080/app-authz-vanilla
           code_id    096d5400-a12d-4200-a793-5384942b595f
           username   dummyuser
      Show
       Attempt to login with invalid username (non-existing user)  After the authentication error, perform a login with configured external identity provider.  In the Events tab LOGIN_ERROR event details show the username from the invalid user (dummyuser) and the LOGIN event details show the same invalid username (dummyuser) instead of the correct username of the existing user. The correct username is shown under the "identity_provider_identity", but username shows incorrect user (dummyuser):   2/22/22 10:21:05 AM LOGIN Client app-authz-jee-vanilla User 6725aeb3-7df5-4515-b968-9bb274a38a0b IP Address 127.0.0.1 Details identity_provider github redirect_uri http: //localhost:8080/app-authz-vanilla consent no_consent_required identity_provider_identity correctUsername code_id 096d5400-a12d-4200-a793-5384942b595f username dummyuser 2/22/22 10:20:54 AM LOGIN_ERROR Client app-authz-jee-vanilla User IP Address 127.0.0.1 Error invalid_user_credentials Details auth_method openid-connect auth_type code redirect_uri http: //localhost:8080/app-authz-vanilla code_id 096d5400-a12d-4200-a793-5384942b595f username dummyuser

      The login events in the Event tab show incorrect user name.

              pskopek@redhat.com Peter Skopek
              rhn-support-mavassil Maria Vassileva
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: