Activities of "maliming"

hi

There is no AntiforgeryValidationException error in your logs.

What are your current exceptions?

Thanks.

hi

Please try changing T to G and clearing Redis if you use it.

IsExternal will be set to true if a user login by oauth-login or ldap

https://abp.io/docs/commercial/latest/modules/identity/oauth-login https://abp.io/docs/latest/modules/identity/idap

hi alexander.nikonov

You can consider disabling the anti-forgery check for the logout endpoint Can you share the logs.txt file? I will check and share the code to disable it.

liming.ma@volosoft.com

Thanks.

Great

We will add an option inthe tenant side to enable/disable it in the next version.

ok

hi

1. Customer A tenant wants to enable only Okta
2. Customer B tenant wants to enable Google and Microsoft
3. Customer C tenant does not want to enable any external providers

You can override the AuthenticationSchemeProvider to remove external login based on the current tenant.

using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;
using JetBrains.Annotations;
using Microsoft.AspNetCore.Authentication;
using Microsoft.Extensions.Options;
using Volo.Abp.DependencyInjection;
using Volo.Abp.MultiTenancy;

namespace Volo.Abp.Account.Public.Web;

[Dependency(ReplaceServices = true)]
[ExposeServices(typeof(IAuthenticationSchemeProvider))]
public class MyAuthenticationSchemeProvider : AuthenticationSchemeProvider, ISingletonDependency
{
    private readonly ICurrentTenant _currentTenant;

    public MyAuthenticationSchemeProvider([NotNull] [ItemNotNull] IOptions<AuthenticationOptions> options, ICurrentTenant currentTenant)
        : base(options)
    {
        _currentTenant = currentTenant;
    }

    protected MyAuthenticationSchemeProvider([NotNull] [ItemNotNull] IOptions<AuthenticationOptions> options, [NotNull] IDictionary<string, AuthenticationScheme> schemes, ICurrentTenant currentTenant)
        : base(options, schemes)
    {
        _currentTenant = currentTenant;
    }

    public override async Task<IEnumerable<AuthenticationScheme>> GetAllSchemesAsync()
    {
        var schemes = (await base.GetAllSchemesAsync()).ToList();
        if (_currentTenant.Name == "TenantA")
        {
            schemes.RemoveAll(x => x.Name == "AzureOpenId");
        }

        if (_currentTenant.Name == "TenantB")
        {
            schemes.RemoveAll(x => x.Name == "AzureOpenId");
            schemes.RemoveAll(x => x.Name == "Google");
        }

        return schemes;
    }
}

Yes.

hi

The host is empty only the tenant has values.

Clone https://github.com/maliming/NextGenPortal/ change connection string migrate database login admin change the azure configuration create a new tenant change your tenant azure configuration in a tenant.

Test your steps.