Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 37 Packages Projects Releases Wiki Activity

Harden user creation from invite

Browse Source 
Fixed an issue where an SSO-only invitation could be accepted with a 
password, creating a local password-authenticated account and 
bypassing SSO enforcement. The authentication mode is now derived 
solely from the invite. Derive the authentication mode from the invite 
record instead of client input during invite acceptance.
This commit is contained in:
Juan Fernandez
2026-07-22 07:29:15 -04:00
committed by GitHub
parent 63679a77e2
commit f89cde43b6
3 changed files with 136 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/16783-sso-invite-password-acceptance
+1
View File
@@ -0,0 +1 @@
- Fixed an issue where an SSO-only invitation could be accepted with a password, creating a local password-authenticated account and bypassing SSO enforcement. The authentication mode is now derived solely from the invite.