4 ms·
SSO idp would generally pass an email address through to the service, no? I could be mistaken about that, but if so, then you'd still have access to a password-
by askvictor 4y ago
SSO idp would generally pass an email address through to the service, no? I could be mistaken about that, but if so, then you'd still have access to a password-recovery-by-email if the identity provider shuts down.
- TheSwordsman 4y agoI've seen many systems that disallow the password reset flow when you sign in via SSO, since the expectation is that you as the service provider are not the authority for the user's identity.
- alex_suzuki 4y agoCan confirm, happened to me just yesterday for ngrok.com/Login with Google.