- Shipped
- 15 Novemba 2026, 07:37 UTC
- Author
- Kamo
- Commit
- 7a63fd0
idp /: **************** CRUD + kuboresha + mtihani / kuanza | matokeo + kuanzisha | kuzima + kuvunja-kioo (MANAGE_IDENTITY_PROVIDERS 718, IDP_CONNECTION_CHANGED juu ya kila kuandika). OIDC ugunduzi (mtoa kuangalia, https tu, SSRF-kulinda: kila admin-kuandika / hati-kuitwa URL lazima kutatua anwani za umma), JWKS + x5c kumalizika. shirikisho / kuanza | callback na connectionId -> IdpSignInService: PKCE + nonce + hali, id_token kuthibitishwa na zilizopo IdTokenValidator (asimmetrical tu, iss / aud / azp / exp / nonce), client_secret_basic default; utambulisho (ISS, chini, id uhusiano) ORG_IDP; auto-kiungo + JIT tu juu ya umiliki wa uhusiano-kuthibitishwa domains (isipokuwa uthibitisho wa kiungo- ukurasa); JIT kupitia **************** (TEAM_MEMBER ACTIVE|PROSPECT, barua pepe kuthibitishwa, hakuna barua uthibitisho); ramani madai / makundi -> idara, cheo kazi, cheo rasmi, jukumu, timu (TeamWriter seam + org graph + MemberRightsAppliedService => haki ya kushinikiza kuishi), sync_on_signin; kuaminiwa IdP MFA kupitia amr / acr; completeOrgIdp (kwamba org tu; kamwe juu ya uwanja mwingine mwenyeji wa). TEST anaendesha uthibitisho wote na maduka ya matokeo kadi (ambaye, ambayo hatua akaunti, jukumu / idara / cheo / timu, MFA) - anaandika chochote. signin / kutambua njia na mwenyeji + uwanja juu ya uhusiano ACTIVE na ownership_verified mistari tu; signin / mbinu orodha sso vifungo. SsoEnforcement: REQUIRED_DOMAINS / REQUIRED_ALL kukataa nywila ya mwanachama kufunika kwa THAT org (403 SSO_REQUIRED + sso data kifungo; picker hupa org na scopes kuchagua token) na kukataa reset tu wakati nenosiri kazi hakuna mahali; wamiliki + org_break_glass_members daima kutolewa; kushindwa kufungua; inert mpaka admin activates inahitajika uhusiano. Activation inahitaji mtihani kupita; Inahitajika mahitaji > = 1 kuvunja-kioo mwanachama na MFA au passkey. IdpHealthJob (6h, singleton): metadata / funguo refresh, cert / siri kumalizika + unreadable metadata -> moja IDP_CONNECTION_HEALTH taarifa kwa tukio. SAML seams (SamlServiceProvider, ****************