<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span lang="ES-AR">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-AR"><o:p> </o:p></span></p>
<p class="MsoNormal">We recently configured Midpoint with Gluu SSO using OpenID following the instructions provided here:
<a href="https://wiki.evolveum.com/display/midPoint/Midpoint+and+SSO+using+Gluu+HOWTO">
https://wiki.evolveum.com/display/midPoint/Midpoint+and+SSO+using+Gluu+HOWTO</a>. User authentication and redirect works well, but we are unable to reset user passwords through Midpoint (it worked prior to configuring Midpoint with Gluu). In order to be able
to access the forgot password page without the user being authenticated already through the SSO page, we added the forgot password page as an exception in the file ctx-web-security.xml by adding the following line: <http pattern="/forgotpassword**" security="none"/>.
This allows the page to be accessed, however, even so, when a user enters their e-mail address to reset their password, an error message is displayed stating that the user is not found. In the idm.log file, it indicates that a null value is being received
for the e-mail field. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">It seems that something to do with the SSO integration is blocking the reset password feature. Has anyone dealt with this or have any ideas as to what could be going on and how to fix it?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you,<o:p></o:p></p>
<p class="MsoNormal">Alex<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="ES-AR"><o:p> </o:p></span></p>
</div>
</body>
</html>