-
Notifications
You must be signed in to change notification settings - Fork 63
Description
Is there an existing feature request for this?
- I have searched the existing issues
Is your feature related to a problem? Please describe.
Before I start the OIDC flow and redirect a user away from my application, I first ask for email by displaying a form. The OIDC flow is started with login_hint, and the user is presented with a "sign in button only" form.
This is very confusing from the user perspective. You enter your email, click a "Sign in/Continue" and then you're asked to just press another "Sign in" button, again. You would expect the next step to ask for a password instead.
Actually, this is what happens after clicking the lone "sign in" button, since the next stage in my auth flow is "username/password" authenticator.
Describe the solution you'd like
I would like to be able to skip the "sign in button only" form.
Maybe the existing "bypass login page" option could be used?
Describe alternatives you've considered
I've forked the plugin and added one line of code to avoid the form challenge.
if (!homeIdps.isEmpty()) {
context.rememberMe().remember(username);
redirectOrChallenge(context, username, homeIdps);
return;
} else {
// This is enough to skip the "sign in button only" form and move to the next step which displays username/password form in my case.
authenticationFlowContext.attempted();
return;
}Anything else?
No response