Closed
Description
Description
Initially, we were forcing members to use an email domain that must match one of the domains set to an organization.
As we updated the user profile validator to skip this validation for unmanaged members (e.g.: existing realm users added as a member) as per #29023, we need to also skip validations for managed members if their respective identity provider does not have a domain set.
This should also make the validation consistent with the OrganizationAuthenticator where users are not automatically redirected if the identity provider does not have a domain set.
Discussion
No response
Motivation
No response
Details
No response