LoginSAML and Account Invitation

Premium Features
1

Hello,
I’m looking at the Loginsaml plug in and user creation in our matomo on premise instance.
When we create users through the interface, the account must be activated with a link.
Our instance does not send mail and we do not want our users to use the login/password connection.
Does the LoginSAML plugin activate the account if the person does not go through the invitation link?

2

Hello,
After some test on my local instance, i can confirm the plugin loginsaml didn’t activate the account.
My solution is to make two trigger on the database to make null invite_expired_at and invite_token.
DELIMITER $$
CREATE TRIGGER before_insert_utilisateur
BEFORE INSERT ON matomo_user FOR EACH ROW
*BEGIN *

  • set NEW.invite_expired_at = null;*
  • set NEW.invite_token = null;*
    END$$
    CREATE TRIGGER before_update_utilisateur
    BEFORE UPDATE ON matomo_user FOR EACH ROW
    *BEGIN *
  • set NEW.invite_expired_at = null;*
  • set NEW.invite_token = null;*
    END$$
    DELIMITER ;
    It’s not the best way to deal with this limitation. This plugin should include this case.
    Best regards.
3

Hi @nick_palouf ,

Currently, it is not, however we have a request in our queue regarding this issue. Currently I could not give you any ETA.

1 Like