Mateusz Mandera 864d663fa6 saml: Don't allow listing zulip_groups in extra_attrs in IdP config. ...

zulip_groups is a special attribute, for the group sync feature, and
will always be read from the SAMLResponse if it's present and group sync
is enabled.
Listing it in extra_attrs is a misconfiguration that results in
confusing behavior. See #35787.

(cherry picked from commit 7d40fcfd7e)

2025-08-28 16:17:08 -07:00

49 KiB

Raw Blame History

View Raw