diff options
author | Simon Rettberg | 2021-01-22 10:34:42 +0100 |
---|---|---|
committer | Simon Rettberg | 2021-01-22 10:34:42 +0100 |
commit | 242b0e0a204db1dcf9ea453ec1a86618fc740ebf (patch) | |
tree | 61181b5254314909cba1a86fe1b998b0a14627d0 /config.php.example | |
parent | [adduser] Fix malformed static method call (diff) | |
download | bwlp-webadmin-242b0e0a204db1dcf9ea453ec1a86618fc740ebf.tar.gz bwlp-webadmin-242b0e0a204db1dcf9ea453ec1a86618fc740ebf.tar.xz bwlp-webadmin-242b0e0a204db1dcf9ea453ec1a86618fc740ebf.zip |
[deploy] Improve account merging
* Make matching of name and email case insensitive
* Add config option to allow/disallow merging with existing shib-account
Diffstat (limited to 'config.php.example')
-rw-r--r-- | config.php.example | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/config.php.example b/config.php.example index 083c555..919ad91 100644 --- a/config.php.example +++ b/config.php.example @@ -24,6 +24,13 @@ define('CONFIG_IDM_LINK_EPSA', 'https://www.bwidm.de/attribute/#eduPersonScopedA define('CONFIG_SURNAME', 'sn'); define('CONFIG_EPPN', 'eppn'); define('CONFIG_SCOPED_AFFILIATION', 'affiliation'); +// If enabled, when a new user registers, check if there is an existing user with +// same organizationid, email, first and last name. If so, allow user to merge account +// with existing one. This should be safe if you trust all the IdPs in your federation, +// which should be assumed to be true anyways for a million other reasons. +// If this is false, only offer merge if the existing account is a "test account", local +// to the masterserver. +define('CONFIG_ALLOW_SHIB_MERGE', true); // Have a properties file or set variables here manually. // Make sure properties file is not in webroot |