Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug:GrowiをSAML認証で利用する際、Windowsログイン時にマルチファクター認証を利用しているとMicrosoftEdgeではSAML認証できない #7496

Closed
eyelly opened this issue Mar 22, 2023 · 1 comment

Comments

@eyelly
Copy link

eyelly commented Mar 22, 2023

Environment

Host

item version
OS ubuntu 20.04
GROWI 6.0.8
node.js 16.19.0
npm 8.19.3
yarn 1.22.19
Using Docker no
Using [growi-docker-compose][growi-docker-compose] no

Client

item version
OS windows 11
browser Microsoft Edge 111.0.x

How to reproduce? (再現手順)

  • IdpはAzureADとし、SAML認証できるようにしておく
  • Windows OSに Windows Helloでログインする

What happens? (症状)

  • Microsoft Edgeを利用してGrowiでSAML認証するとログインできない
  • Google ChromeではGrowiにSAML認証でログインできる
//AzureADのエラーメッセージ
Message: AADSTS75011: Authentication method 'X509, MultiFactor' by which the user authenticated with the service doesn't match requested authentication method 'Password, ProtectedTransport'. Contact the ***********Wiki application owner.

What is the expected result? (期待される動作)

  • Windows Helloを利用しているユーザーでもMicrosoft Edgeでログインできる

Note

※似ているissue
#5922

※参考URL
https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad/aadsts75011-error-on-edge-azure-ad-joined-machines/m-p/2575051
https://learn.microsoft.com/ja-jp/troubleshoot/azure/active-directory/error-code-aadsts75011-auth-method-mismatch
https://www.hondalabo.net/entry/2021/11/09/101737

@yuki-takei
Copy link
Member

@eyelly
v6.3.3 と v7.0.1 にて disableRequestedAuthnContext: true が追加されました。こちらの症状は回避できるはずですので、可能であれば動作検証をお願いいたします。

ref: #7725

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

No branches or pull requests

2 participants