I have the module working and properly authenticating users but the problem I am having is that when a user is authenticated by the IDP but not provisioned in Drupal (auto registration disabled), the user is brought back to the home page and no message is displayed why this is the case. I reviewed the code in the module and see this message is suppose to be displayed: 

$msg = t("We are sorry. While you have successfully authenticated, you are not yet entitled to access this site. Please ask the site administrator to provision access for you.");

However I think something is happening with redirects that this message isn't being presented to the user. I am filing this as a support issue because I am not sure if there is something I can do on the content side to make sure this is displayed before determining its a bug.

Comments

StarCruiser’s picture

StarCruiser commented

Hi, same issue also for 7.x-3.x-dev. Anyone with a solution or workaround? Thanks.

danepowell’s picture

danepowell commented
Related issues: +#2886630: Configurable redirect for unprovisioned users

Instead of setting a message, it might be better to redirect users to a custom page anyway, so that site builders can have a completely customizable message / explanation: #2886630: Configurable redirect for unprovisioned users

marcvangend’s picture

marcvangend
he/him
Primary language Dutch
Location Amsterdam
commented
Version: 7.x-2.0-alpha2 » 8.x-3.x-dev

This is still an issue under Drupal 9 with module version 3.2. Normally, Drupal supports showing messages after a redirect, but in order to make it work you would return a redirect response object from a controller. In this case the redirect seems to happen in the Library, \SimpleSAML\Auth\Simple::logoutCompleted.

(Ideas for) bugfixes or workarounds are welcome.