Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Link and unlink profiles with social sign in providers #32

Closed
1 of 3 tasks
aeneasr opened this issue Jul 22, 2019 · 0 comments · Fixed by #415
Closed
1 of 3 tasks

Link and unlink profiles with social sign in providers #32

aeneasr opened this issue Jul 22, 2019 · 0 comments · Fixed by #415
Labels
package/selfservice/oidc Affects the OpenID Connect Self Service Strategy
Milestone
v0.3.0-alpha.1

Comments

@aeneasr
Copy link
Member

aeneasr commented Jul 22, 2019 •
edited
Loading

It should be possible to (un-)link delegated identities (e.g. from Google) to existing identities in the system.

  • Document account enumeration
  • The delegated identity must not have a profile yet. If a profile exists, that profile must be merged or removed first using the REST API
  • If the email (or any other identifier?) exists already for some other identity we should disallow sign up and ask to log in, then link the accounts. Anything else might lead to account impersonation or unexpectededly having 2 accounts which later need to be merged.
@aeneasr aeneasr added the package/selfservice/oidc Affects the OpenID Connect Self Service Strategy label Jul 22, 2019
@aeneasr aeneasr added this to the v0.0.1 milestone Jul 22, 2019
@stale stale bot added the stale label Jul 23, 2019
@aeneasr aeneasr removed the stale label Jul 23, 2019
@ory ory deleted a comment from stale bot Jul 23, 2019
@aeneasr aeneasr modified the milestones: v0.0.1, v0.0.2 Aug 6, 2019
@aeneasr aeneasr mentioned this issue May 5, 2020
Closed
aeneasr added a commit that referenced this issue May 13, 2020
@aeneasr
docs: document account enumeration defenses for oidc
708816d 
See #32
aeneasr added a commit that referenced this issue May 14, 2020
@aeneasr
docs: document account enumeration defenses for oidc
faad904 
See #32
aeneasr added a commit that referenced this issue May 15, 2020
@aeneasr
docs: document account enumeration defenses for oidc
266329c 
See #32
aeneasr added a commit that referenced this issue May 15, 2020
@aeneasr
docs: document oidc strategy
cba0073 
Closes #409
Closes #124
Closes #32
@aeneasr aeneasr mentioned this issue May 15, 2020
Merged
aeneasr added a commit that referenced this issue May 15, 2020
@aeneasr
docs: document oidc strategy (#415)
9f079f4 
Closes #409
Closes #124
Closes #32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
package/selfservice/oidc Affects the OpenID Connect Self Service Strategy
Projects
None yet
Milestone
v0.3.0-alpha.1
Development

Successfully merging a pull request may close this issue.

docs: document oidc strategy ory/kratos
1 participant
@aeneasr