Smart card users
-
Hi,
We’re experiencing an issue with smart card users in Next AD Integration.
Our setup is an Intranet multisite. All users are in the same domain, but they have
different levels of access (AD groups) to different sites. Some, but not all, users log in using smart cards.
When a smart card user first accesses a site (with automatic account creation enabled),
the account is created as expected. However, when next a Sync to WordPress is performed
(the following night), the account is disabled.
In the site’s user list, the account has an entry in the “Disabled” column which reads
“The account of user X requires a smart card for login.” The log contains a warning with the same message preceded by “Disable user ‘X’: “,
Since we’re using SSO, we don’t need the users (smart card or not) to be able to enter a password and have it authenticated: all users are already logged into Windows when they access the WP sites. But we do need smart cards users to be able to log in.We’ve looked in the code, and it appears the problem is in checkAccountRestrictions() in classes/Adi/Synchronization/WordPress.php.
The plugin correctly identifies the account as a “smart card required” account, but then incorrectly decides to disable the account for this reason.We think that if SSO is enabled, smart card accounts should not be disabled during sync.
At least maybe there should be an option to set this behaviour?Thanks
The topic ‘Smart card users’ is closed to new replies.