Repository navigation
docs(saml): document User Identifier Source and Match Users By - #16322
Open
paulOsinski wants to merge 2 commits into
Open
paulOsinski wants to merge 2 commits into
paulOsinski wants to merge 2 commits into
Conversation
DefectDojo Pro can now match a SAML login by the NameID or by a mapped attribute, compared against username or email. Add a "Matching logins to users" section, fold the two settings into the setup steps, update the cloud-vs-on-prem table, and rewrite the "User not found" troubleshooting entry around identifier mismatch. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
…into feat/saml-user-identifier-docs
|
This pull request modifies sensitive codepaths in
Configured Sensitive Codepath Modified by Non-Allowed Author in
|
| Vulnerability | Configured Sensitive Codepath Modified by Non-Allowed Author |
|---|---|
| Description | File 'dojo/db_migrations/0299_finding_test_numsev_index.py' matches configured sensitive codepath pattern 'dojo/db_migrations/*.py' and was modified by 'paulOsinski' (commit 66898c9) who is not in the allowed authors list. |
Configured Sensitive Codepath Modified by Non-Allowed Author in dojo/finding/models.py (drs_b0f9227b)
| Vulnerability | Configured Sensitive Codepath Modified by Non-Allowed Author |
|---|---|
| Description | File 'dojo/finding/models.py' matches configured sensitive codepath pattern 'dojo/finding/*.py' and was modified by 'paulOsinski' (commit 66898c9) who is not in the allowed authors list. |
Comment to provide feedback on these findings.
Report false positive: @dryrunsecurity fp [FINDING ID] [FEEDBACK]
Report low-impact: @dryrunsecurity nit [FINDING ID] [FEEDBACK]
Example: @dryrunsecurity fp drs_90eda195 This code is not user-facing
All finding details can be found in the DryRun Security Dashboard.
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Documentation for the new SAML user-matching settings in DefectDojo Pro (User Identifier Source and Match Users By). Until now a SAML login was always matched by comparing the assertion's NameID against the DefectDojo username, and the page told readers to change what the IdP sends as the NameID. Pro can now take the identifier from a mapped attribute instead and compare it against username or email, which is what an opaque or transient NameID needs.
Changes to
docs/content/admin/sso/PRO__saml.md:Docs only; no code changes.
Test results
Rendered locally; links are in-page anchors.
Documentation
This PR is the documentation.
🤖 Generated with Claude Code