feat(sso): Test Login admin flow across Custom OIDC, SAML, LDAP#28034

Open

siddhant1 wants to merge 53 commits into

mainfrom

Commits on Apr 29, 2026

feat: SSO rework — add Test Login, emailClaim, discoveryUri, and protocol selector (#27312)

authored and
Siddhant
committed
fix: exclude test-login/initiate from JwtFilter and hide authorizer fields

authored and
Siddhant
committed
fix: hide emailClaim, discoveryUri, adminPrincipals fields and add pre-validation to Test Login

authored and
Siddhant
committed
fix: rewrite Test Login endpoints to return Response instead of void

authored and
Siddhant
committed
fix: hide OIDC prompt field in all provider UI schemas

authored and
Siddhant
committed
fix: move Test Login endpoints from SystemResource to ConfigResource

authored and
Siddhant
committed
fix: make TestLoginHandler self-contained — build OIDC client from form data

authored and
Siddhant
committed
fix: use OIDCProviderMetadata.parse() instead of resolve() for discovery URI

authored and
Siddhant
committed
fix: use registered callback URL for Test Login to avoid redirect_uri_mismatch

authored and
Siddhant
committed
fix: stale formData on first Test Login click + disable Save until emailClaim set

authored and
Siddhant
committed
feat: add OIDC provider dropdown (Google, Azure, Okta, Auth0, Cognito, Other)

authored and
Siddhant
committed
fix: validate Discovery URI placeholders and auto-sync before validation

authored and
Siddhant
committed
feat: prompt in advanced, discovery URI defaults, validation before Test Login

authored and
Siddhant
committed
fix: pass skipTestLoginFields to validateAuthorizerConfiguration

authored and
Siddhant
committed
feat: add offline_access to default scope, hide scope/prompt/okta auth method

authored and
Siddhant
committed
fix: remove @Valid from validate endpoint to prevent LDAP/SAML field errors on OIDC

authored and
Siddhant
committed
fix: update all hardcoded scope defaults to include offline_access

authored and
Siddhant
committed
fix: use localStorage for popup communication, restore scope/prompt/authMethod to visible

authored and
Siddhant
committed
fix: show top-level discoveryUri, hide nested oidcConfiguration.discoveryUri

authored and
Siddhant
committed
fix: write discoveryUri to top-level field, prioritize top-level in TestLoginButton

authored and
Siddhant
committed
feat: pass all OIDC params through Test Login + revert offline_access default

authored and
Siddhant
committed
feat: SSO confidential — Validate → Test Login → Save gate + backend normalization

authored and
Siddhant
committed
fix: match admin principals by email in addition to username

authored and
Siddhant
committed
feat: SAML Test Login + OIDC validator refinement

authored and
Siddhant
committed
fix: audit fixes — PKCE, nonce, SAML session, normalize hardening

authored and
Siddhant
committed
fix: OIDC Test Login — POST form body + 302 redirect

authored and
Siddhant
committed
feat: LDAP Test Login + unit test coverage for all three protocols

authored and
Siddhant
committed
chore: apply mvn spotless:apply to unblock Java checkstyle

authored and
Siddhant
committed
fix

Siddhant
authored and
Siddhant
committed
chore(sso-ui): swap SSO form chrome to Untitled UI primitives

authored and
Siddhant
committed
chore(sso-ui): drop PR #27336 frontend changes; keep only backend

authored and
Siddhant
committed
chore(sso-ui): integrate Test Login + align fields with proposal

authored and
Siddhant
committed
fix(saml): ignore configured emailClaim at login

authored and
Siddhant
committed
chore(i18n): sync SSO Test Login keys across locales after rebase

authored and
Siddhant
committed

Commits on Apr 30, 2026

feat(sso-ui): lockout-safe save + email-claim status surface

authored and
Siddhant
committed

Commits on May 4, 2026

fix(sso-ui): track Test Login freshness as a flag, not a JSON snapshot

authored and
Siddhant
committed
fix(sso-ui): fail Test Login fast when the popup is closed

authored and
Siddhant
committed
style(sso-ui): apply #F8F9FC panel chrome to main fields and advanced accordion

authored and
Siddhant
committed
fix

Siddhant
authored and
Siddhant
committed

Commits on May 5, 2026

feat(sso): existing-mode Test Login via shared deep-merge overlay

aji-aju
and
claude
committed
Merge remote-tracking branch 'origin/main' into sid/sso-layout

Siddhant
authored and
Siddhant
committed

Commits on May 6, 2026

change

Siddhant
authored and
Siddhant
committed
fix(sso): pass mode=existing to Test Login + canonical Public OIDC save shape

authored and
Siddhant
committed
test(sso): drop obsolete Public OIDC oidcConfiguration tests

authored and
Siddhant
committed
Merge branch 'sid/sso-layout' of https://github.com/open-metadata/OpenMetadata into sid/sso-layout

Siddhant
authored and
Siddhant
committed
feat(sso): trim SAML form main section to IdP-only fields

authored and
Siddhant
committed
feat(sso): trim LDAP form main section to bind-only fields

authored and
Siddhant
committed

Commits on May 11, 2026