Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

SSO login doesn't work for custom profile

See original GitHub issue

Steps to reproduce

Run flatpak run im.riot.Riot --profile pikaviestin
Set homeserver URL as https://pikaviestin.fi/
Select Continue with authentik
Web browser opens.
Login
Select “Continue”
Another Element opens without the specified profile (it keeps loading forever, but I presume it’s the default profile for another account)

Outcome

What did you expect?

I expected Element to be logged in.

What happened instead?

I got a different Element instance with a different profile.

Operating system

Fedora release 36 (Thirty Six)

Application version

1.10.10 ?

How did you install the app?

https://flathub.org/apps/details/im.riot.Riot (Element doesn’t provide Fedora packaging and “blessed” repository is discontinued https://github.com/vector-im/element-web/issues/3781#issuecomment-1054068455)

Homeserver

pikaviestin.fi on Synapse 1.51.0

Will you send logs?

Issue Analytics

State:
Created a year ago
Comments:6 (6 by maintainers)

Top GitHub Comments

1reaction

t3chguycommented, Apr 19, 2022

Can confirm it works as expected on Ubuntu 20.04 with the official deb.

For the record the way this works is

Element (ProfileX) appends to file sso-sessions.json in the Default Profile’s data directory a $key->/path/to/ProfileX
Element (ProfileX) opens browser with callback to element://<…>?element-desktop-ssoid=$key
Browser opens the callback
Element sees the ssoid in the URL passed to it for handling and looks up the profile to use in the JSON map.

0reactions

Mikaelacommented, Apr 19, 2022

I don’t have an officially supported release available, but I opened https://github.com/flathub/im.riot.Riot/issues/268 in case they are able to reproduce or figure out which side this issue is on. Meanwhile I am asking if anyone is using an officially supported operating system and could test this.

Top Results From Across the Web

SSO login doesn't work for custom profile · Issue #268 - GitHub

Run flatpak run im.riot.Riot --profile pikaviestin · Select Continue with authentik · Web browser opens. · Login · Select "Continue" · Another ...

SSO does not work and users are getting prompted for ...

Click 'Custom Level' button, under User Authentication section, find 'Automatic logon only in Intranet Zone'. Ensure that it is selected. Usually group policy ......

Troubleshoot single sign-on (SSO) - Google Support

This document provides steps to resolve common error messages encountered during the integration or use of SAML-based single sign-on (SSO) with Google ...

Require Users to Log In with SSO - Salesforce Help

Disable logins using Salesforce credentials. In Setup, in the Quick Find box, enter Single Sign-On , then select Single Sign-On Settings. Click Edit....

You only need to call`aws sso login` once for all your profiles

aws/cli/cache . This means if you call aws sts get-caller-identity --profile AcctA-Role1 again, it won't load the SSO token or ...