5 commits

Author	SHA1	Message	Date
Patrick Cloke	b85d7652ff	Do not allow a deactivated user to login via SSO. (#7240)	2020-04-09 13:28:13 -04:00
Richard van der Hoff	b7da598a61	Always whitelist the login fallback for SSO (#7153) ... That fallback sets the redirect URL to itself (so it can process the login token then return gracefully to the client). This would make it pointless to ask the user for confirmation, since the URL the confirmation page would be showing wouldn't be the client's.	2020-03-27 20:24:52 +00:00
Brendan Abolivier	65c73cdfec	Factor out complete_sso_login and expose it to the Module API	2020-03-03 10:54:44 +00:00
Richard van der Hoff	b68041df3d	Add a whitelist for the SSO confirmation step.	2020-03-02 17:05:09 +00:00
Brendan Abolivier	b2bd54a2e3	Add a confirmation step to the SSO login flow	2020-03-02 16:36:32 +00:00