libre.sh/keycloak-scim
2
0
Fork 0
Code Issues 14 Pull requests Releases Packages Activity Actions 6

Disable identity provider at the realm level when an organization is disabled

Browse source 
Closes #29483

Signed-off-by: vramik <vramik@redhat.com>
This commit is contained in:
vramik 2024-05-21 09:27:06 +02:00 committed by Pedro Igor
parent 278341aff9
commit 55bf4feebc
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
model/infinispan/src/main/java/org/keycloak/models/cache/infinispan/RealmAdapter.java vendored
View file

@ -883,7 +883,9 @@ public class RealmAdapter implements CachedRealmModel {
public boolean isEnabled() {
// if IdP is bound to an org
if (getOrganizationId() != null) {
return session.getProvider(OrganizationProvider.class).isEnabled() && super.isEnabled();
OrganizationProvider provider = session.getProvider(OrganizationProvider.class);
OrganizationModel org = provider == null ? null : provider.getById(getOrganizationId());
return org != null && provider.isEnabled() && org.isEnabled() && super.isEnabled();
}
return super.isEnabled();
}