Page MenuHomePhabricator

Allow login to be disabled for an authentication provider
Closed, ResolvedPublic


It's currently possible to disable registration for an auth provider, but not possible to disable login.

Installs may reasonably want to allow linking to a provider like Asana, but require login through a narrower subset of providers (e.g., Google) -- for example, because Google has mandatory MFA but Asana does not.

It should be straightforward to support this, there was just no product motivation to implement it originally because there weren't any integration-focused use cases yet.

Revisions and Commits

Event Timeline

epriestley claimed this task.
epriestley raised the priority of this task from to Normal.
epriestley updated the task description. (Show Details)
epriestley added projects: Phacility, Auth.
epriestley added subscribers: epriestley, turadg.
epriestley added a revision: Restricted Differential Revision.Dec 15 2015, 10:34 PM
epriestley added a commit: Restricted Diffusion Commit.Dec 15 2015, 10:52 PM

This was easier than I thought and now in HEAD. Should go out Saturday unless churn related to T9905 makes me uneasy about promoting to stable -- I'm currently feeling good about promoting, but still have three full days to mangle master.

(The first change attached here was the instance sync change.)