Project

General

Profile

Defect #2594

Updated by Radek Tomiška about 4 years ago

Disabled identity is not checked in sso authentication filters (SsoIdmAuthenticationFilter) and target system authentication filters (DefaultAccAuthenticator, DefaultAccMultipleSystemAuthenticator) => valid token is created for disabled identity and identity is successfully authenticated.  
 Fix mentioned FIx filters to not authenticate invalid identity. 

 Issue is connected to #2413, where invalid identity was checked even if token is valid (as "duplicate" check).

Back