Confusing error when openid RP requires validated email, and unvalidated user not logged in

Bug #1203076 reported by James Westby
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Canonical SSO provider
Confirmed
High
Unassigned

Bug Description

When doing the openid dance the user will be asked to sign in if they aren't already.

If they RP requires a validated email, and the user doesn't have one they won't be able
to log in to SSO. The error message they get is that the email/password don't match, but
what it means is that they have no validated email.

This is confusing. The ideal behaviour is probably to log the user in, and take them to the
email page they see if they are logged in to begin with.

Dave Morley (davmor2)
Changed in canonical-identity-provider:
status: New → Confirmed
importance: Undecided → High
assignee: nobody → Ubuntu One web team (ubuntuone-web)
tags: added: u1-by-dev u1-on-staging
Curtis Hovey (sinzui)
Changed in canonical-identity-provider:
assignee: Registry Administrators (registry) → nobody
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.