You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Resolve shared Daon connections in the Daon identity verification connector #28634
The Daon identity verification connector resolves the Daon connection referenced by daon_idp_id through IdpManager#getIdPByResourceId(resourceId, tenantDomain, ignoreFileBasedIdps). When the referenced connection is shared from a parent organization, this returns the sub-organization's shadow connection, which does not carry the parent's Daon authenticator configuration. As a result, the connector cannot find the OIDC client credentials, endpoints and claim mappings, and identity verification fails in sub-organizations.
Suggested Improvement
Resolve the referenced Daon connection with SharedIdPResolveType.FULL_RESOLVED, so a shared connection returns the parent's full configuration overlaid with the shadow connection's own identifiers.
Activity