[Unity-idm-discuss] fail Authentication action in translation profile

[Sander A. <sa....@fz...>]

Good morning Krzysztof,
we tested the fail Authentication action in the translation profiles to
do a lightweight ABAC/authorisation within unity for service who can't
do it by itself.
We encountered some problems/not optimal behaviour in it. The error
message is only send to service, but not to the users. The services can
not handle such specific error messages and the user get a very strange
error at the service. E.g. the error of Nextcloud is:
"Account not provisioned.
Your account is not provisioned, access to this service is thus not
possible."

The user do not really understand why the login fails. From our point
of view it would be great if the failed authentication error is shown
to the user, maybe with the possibility to login with another account.
Do you see a possibility to extend the fail authentication behaviour?

Best regards,
Sander
-- 
Federated Systems and Data
Juelich Supercomputing Centre

phone: +49 2461 61 8847
fax: +49 2461 61 6656
email: sa....@fz...

----------------------------------------------------------------------
-----------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Volker Rieke
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt
-----------------------------------------------------------------------
-----------------------------------------------------------------------