I have this issue where i have setup Google SSO, b...
# support
a
I have this issue where i have setup Google SSO, but users are auto provisioned if they are part of that domain google account. How do i control at Signoz level as well, the docs says we should still invite, but that is not the case. Lil urgent
Folks need help on this pls
n
Hey @Adithya Dinesh, you need to invite the users associated with your domain
@Ask Inkeep Any suggestions here?
a
Thanks for tagging me @Nagesh Bansal. I'll look through relevant sources and get back to you shortly.
Regarding controlling user auto-provisioning with Google SSO in SigNoz, there's an open feature request for automatic user provisioning based on AD/SAML groups (1) . Currently, users need to be created manually even with SSO enabled . Additionally, there's a known issue where users can bypass SSO login using password authentication even after SSO is configured (2) . You can still login with email-password by accessing the login page with
?password=Y
query parameter . For enforcing SSO-only access, there's an open request to add an option to disable password login entirely when SSO is enabled . This would prevent users from bypassing SSO authentication . The current workaround is that SSO support (Google OAuth) is available in the Community Edition as of v0.85.0 (3) , but automatic user provisioning based on groups requires manual user creation (1) .
To learn more, see the sources I considered: [[1] Automatic user provisioning based on AD/SAML groups](https://github.com/SigNoz/signoz/issues/4550) [[2] disable user login with password after SSO is enabled](https://github.com/SigNoz/signoz/issues/5137) [[3] Consider open sourcing SSO](https://github.com/SigNoz/signoz/discussions/6604)
a
@Nagesh Bansal The problem here is it is auto provisioning without inviting as well.
Its actually opposite is what creating problem causing anyone to login within domain
a
Appreciate the feedback! Feel free to ask me again with additional guidance or context.
a
@Nagesh Bansal it would be helpful if we can discuss on this, causing issue tbh to us due to auto creation of users. How do we stop it?
cc @Jothilal Sottallu
j
Hey @Srikanth Chekuri can you please provide support here.