Gustavo Valverde 7484c5dd3e feat(sso)!: add mapProfileToUser and use only email-format NameIDs as emails ...

SSO sign-in failed whenever the provider sent no email, with no hook to
supply one. mapProfileToUser runs on every OIDC and SAML sign-in before the
user is looked up and can return the email, name, image, and emailVerified.

A SAML NameID now becomes the email only when its Format is emailAddress,
matching Keycloak and Ory Polis. Persistent and transient NameIDs are opaque
and were being stored as user emails.

2026-10-14 10:50:46 +01:00

..

_generated/docs/v1-6

docs: add versioned documentation (#11041)

2026-08-29 07:10:36 +09:00

blogs

docs: explain the 1.7 account schema transition (#11196)

2026-09-09 10:08:03 +00:00

changelogs

chore(docs): format markdown including mdx files (#9085)

2026-04-10 05:09:33 +00:00

docs

feat(sso)!: add mapProfileToUser and use only email-format NameIDs as emails

2026-10-14 10:50:46 +01:00