Single Sign-on Plugin Issue: User Authentication Fails for Existing Accounts

[fbermejog]

Hello,

I'm using your Single Sign-on plugin (v1.4.0) with GLPI(v10.0.18 ) to authenticate users via Google Workspace. We're facing a specific issue with users who had an existing account in GLPI before the plugin was activated.

The problem is that users who previously logged in via SMTP or GLPI's internal database can't log in after the plugin is enabled. When they try to log in, they receive the error "User not authorized to connect to GLPI."

I have investigated the database and confirmed that the authtype and auths_id values in the glpi_users table are correct and identical to those of a working user. There are also no discrepancies in the is_active, is_deleted, or is_deleted_ldap fields. The user exists in the database but does not appear in the GLPI user list, which suggests an underlying inconsistency.

I attempted to temporarily deactivate the user (is_active = 0) to force a resynchronization upon login, but this solution did not work.

I need your help to understand why the existing user account is not being synchronized and how we can resolve this issue without losing the ticket history associated with the user.

Thank you for your time and assistance.