Allow user to "receive forget password email"/"reset their own password" when SSO is enabled

[reporting-mryum]

We currently have SSO enabled for our product development but we also have internal users who need to reset their password once in a while for personal or security reasons. 

But the current behaviour is "if you have SSO enabled, users won't receive an email when they click forget password and only admins can reset their password instead". This is very troublesome and if you have a large organisations with hundreds of internal users, it is very difficult for the admins to manage that expectation. 

Would really like to get some help from the dev team and allow "forget password" even when SSO is enabled! 

[DRay]

Hello @reporting-mryum,

Thank you for reaching out. Non-SSO users should be able to reset their passwords as usual. Only SSO users will need to go through the SSO provider to change it. Are you looking for a way to redirect or change the SSO reset message?

[DRay]

You can also use the users/forgetpassword API to send the email. Here is the documentation on that. https://sisense.dev/guides/restApi/v0/?platform=linux&spec=L2023.11#/users/forgetPassword

[reporting-mryum]

Our ticket 00779647 said we users can't reset password via email and all our users are currently not able to receive "forget password" email at all. Very confused here. If non-SSO users can, why are our users not able to receive the forget password emails?  

[DRay]

Hi @reporting-mryum.

Support is correct, I apologize for the confusion.

I can see a use case for allowing non-SSO users to continue to use the regular PW reset flow when SSO is enabled. Would that address your need?

[DRay]

Hello  @reporting-mryum ,

Thank you for sharing your idea and providing details. We will bring this to the product team and provide updates here as they are available.

We encourage people to continue to vote and comment. We use community interest as one of the ways we prioritize efforts, so every vote and comment can help turn a request into a reality.

Thank you again for sharing and being part of our community!

[DrewGillow]

We have the same use case.  Client users are SSO and internal users have login, but cannot reset their passwords.  Being able to flag users as SSO or NOT_SSO and allowing the reset password to work if they are NOT_SSO would be helpful.