Hi,
It would be very handy to disable the login page / login form if you are using any kind of SSO as primary mean of authentication.
The use case is: My company uses zammad as support platform for its user. The product we sell is authenticated, users are invited to create an account and access all our resources (documentation, download assets, software, etc…) through this authentication scheme.
Our authentication provider supports SAML and zammad was a perfect fit on that point.
The problem is that the login page offers a login / password form and users can’t help but to try their product credentials in there where they should in fact click on the SAML button.
Current workaround have been to tweak the login page CSS to hide the login form and modify the SAML button to display the company logo and “Log In With [Company Name]”. It works ok but breaks each time we restart / update zammad and it feels like a very hacky way of doing it.
The ideal behaviour would be:
- User tries to access any content (Including the login page itself).
- Instead of presenting the login page, redirects the user to the “primary SSO” set up by the administrator
- User logs in using third party provider and finally redirects and have access to requested content.
Thanks a lot,
Keep on the good work, this is a great piece of software.
Nicolas Jarnoux