Okta: home depot taken from the first of two depot codes

Project: Engineering
Type: Bug
Status: Done Done
Priority: Medium
Organization: Vossberg Logistik
Reporter: Yusuf Demir <yusuf.demir@acme-hq.example>
Assignee: Marek Nowak <marek.nowak@acme-hq.example>
Labels: vossbergokta
Components: identity-service
Fix versions: identity-service 2026.09.09
Sprint: Sprint 50
Created: 24 Aug 2026, 14:40 UTC
Updated: 9 Sep 2026, 14:00 UTC
Resolved: 9 Sep 2026, 14:00 UTC

Description

Vossberg (SUP-1120): people who work at two depots get their home depot changed at sign-in. Okta sends both codes in vossbergDepot and doesn't always send them in the same order; identity-service:src/Saml/AssignRolesFromClaims.php takes the first value as the home depot. Access isn't affected, only which depot shows as home (and so where their requests go).

Fix

Keep the current home depot when it's among the values; add the others as depots the person works at.

Linked issues

relates to SUP-1120 Vossberg: home depot changes at sign-in for people with two depot codes in Okta Done
relates to ENG-1512 Okta: when the depot attribute is empty, use the person's home depot and log it Done

Comments (1)

Marek Nowak · 25 Aug 2026, 08:15 UTC

Agree. Small. Next sprint.