Gluu 2.4.3 IdP - Need to disable Request for Permission prompt during authentication

By: Cip Dominguez user 21 Jul 2016 at 9:47 p.m. CDT

5 Responses
Cip Dominguez gravatar
I have a customer where I've installed Gluu 2.4.3 and configured it successfully as a SAML IdP provider. During the Gluu IdP login process, after successful username/password LDAP authentication, the user is prompted with the standard "Request for Permission" prompt "/oxauth/authorize". The customer doesn't like this prompt and wants to remove or suppress this prompt. They only wish to see the standard login page and get redirected to the federated application. How can I suppress or remove the standard "Request for Permission" prompt "/oxauth/authorize" for all users? Is there a way to disable it?
Rhel67
closed

Answers

By Mohib Zico staff 22 Jul 2016 at 5:01 a.m. CDT

Copy
Mohib Zico gravatar
Hi Cip, I would encourage you to move for Gluu Server 2.4.4; there is one tiny issue which made it complex to change this value in 2.4.3. If you / your client can't move to 2.4.4 atm; let us know... we will inform you how to change this setting in 2.4.3 anyhow.

By Aliaksandr Samuseu staff 22 Jul 2016 at 9:35 a.m. CDT

Copy
Aliaksandr Samuseu gravatar
Hi, Cip. I'm with Zico, of course, on that you should wait for 2.4.4, which should be there in a week. But if I got you correctly and you need to just get rid of pop-up dialog asking for permission to release scopes, you can do it by moving to "OpenID Connect -> Clients" and editing relevant OIDC client there; you need to set "Pre-Authorization" property to "Enabled" for it. These steps will also work for 2.4.4 in the future. "oxTrust Admin GUI" is the one client you'll need to edit, but if your customer uses OIDC and creates his own client entries too, he'll need to edit this property for all of them

By Cip Dominguez user 24 Jul 2016 at 5:25 p.m. CDT

Copy
Cip Dominguez gravatar
In 2.4.3 I went to OpenID Connect -> Clients -> oxTrust Admin GUI and saw Pre-Authorization was already set to "Enabled". I restarted tomcat and same behavior, pop-up dialog always asking for permission to release scopes. Please send me the instructions to get rid of OpenID Connect pop-ups in 2.4.3.

By Cip Dominguez user 24 Jul 2016 at 5:46 p.m. CDT

Copy
Cip Dominguez gravatar
Quick update - I restarted all components via service gluu-server-2.4.3 stop and start scripts and now the pop-up is gone. Thanks!

By Aliaksandr Samuseu staff 25 Jul 2016 at 4:46 a.m. CDT

Copy
Aliaksandr Samuseu gravatar
>In 2.4.3 I went to OpenID Connect -> Clients -> oxTrust Admin GUI and saw Pre-Authorization was already set to "Enabled". That's one of the issues with this feature. It's shown as "Enabled" from the start, but it's not. You need to click "Update" button once on this page to actually persist the setting.

Post an answer