Vossberg: home depot changes at sign-in for people with two depot codes in Okta
Description
People who work at two depots get their home depot changed at sign-in. Example: Jana Wolf works at Kassel (DE-KSL) and Göttingen (DE-GOE). Okta sends both codes in vossbergDepot. After some sign-ins the home depot is Göttingen, after others Kassel.
Linked issues
- relates to ENG-1660 Okta: home depot taken from the first of two depot codes Done
Comments (5)
ENG-1660. identity-service:src/Saml/AssignRolesFromClaims.php takes the first depot value as home depot. It should keep the current home depot when it's among the values and add the others as depot assignments.
Agree with Yusuf. Home depot stays if it's in the list; the rest become assignments. Small.
Fixed in yesterday's release: if a person's home depot is among the codes Okta sends, it stays, and the other codes are added as depots the person works at. Could you check Jana Wolf's account after the next sign-in?
Checked, Kassel stays. Thank you.
Hi Matthias, reproduced with our local test identity provider: when vossbergDepot has two values, sign-in takes the first one as the home depot, and Okta doesn't always send them in the same order. Sent to engineering. The person's access isn't affected, only which depot shows as home.