Skip to content

Resolve shared Daon connections in the Daon identity verification connector #28634

Closed

Description

@ashanthamara

Current Limitation

The Daon identity verification connector resolves the Daon connection referenced by daon_idp_id through IdpManager#getIdPByResourceId(resourceId, tenantDomain, ignoreFileBasedIdps). When the referenced connection is shared from a parent organization, this returns the sub-organization's shadow connection, which does not carry the parent's Daon authenticator configuration. As a result, the connector cannot find the OIDC client credentials, endpoints and claim mappings, and identity verification fails in sub-organizations.

Suggested Improvement

  • Resolve the referenced Daon connection with SharedIdPResolveType.FULL_RESOLVED, so a shared connection returns the parent's full configuration overlaid with the shadow connection's own identifiers.

Related to #28391

Related PRs

Please select the area issue is related to

B2B

Version

7.4.0

Developer Checklist

  • [Behavioural Change] Does this change introduce a behavioral change to the product?
  • ↳ Approved by team lead
  • ↳ Label impact/behavioral-change added
  • [Migration Impact] Does this change have a migration impact?
  • ↳ Migration label added (e.g., 7.2.0-migration)
  • ↳ Migration issues created and linked
  • [New Configuration] Does this change introduce a new configuration?
  • ↳ Label config added
  • ↳ Configuration is properly documented
  • [IAM CTL] Does this change affect the behavior of the IAM CTL tool?
  • ↳ Necessary changes made in the IAM CTL tool

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions