SSO broken with passwordless and database connection enabled

Knowledge Articles
1

Problem statement

SSO is not working on our tenant

Symptoms

  • The applications in question have both a passwordless and database connection enabled.​​​​​​
  • The /authorize requests do not specify the connection param

Steps to reproduce

Broken SSO example:

  1. Configure New UL
  2. Enable a database connection on application A
  3. Enable the same database connection and a passwordless email connection on application B
  4. Login to application A
  5. Send an /authorize request from application B without specifying the connection param
  6. Observe that you arrive at the New UL page and are prompted to login via the same database connection again.

Working SSO example:

  1. Configure New UL
  2. Enable a database connection on application A
  3. Enable the same database connection and a passwordless email connection on application B
  4. Login to application A
  5. Send an /authorize request from application B, specifying the database connection with the connection param
  6. Observe that SSO works

Solution

Either disable the passwordless email connection on application B or configure application B to send the connection param. Understand that with the latter option, you’ll only see SSO working when the connection param matches the connection associated with the existing session.