0
Fork 0
mirror of https://github.com/logto-io/logto.git synced 2025-01-13 21:30:30 -05:00
logto/.changeset/witty-rivers-laugh.md

13 lines
525 B
Markdown
Raw Normal View History

---
"@logto/core": patch
---
prevent user registration and profile fulfillment with SSO-only email domains
Emails associated with SSO-enabled domains should only be used through the SSO authentication process.
Bug fix:
- Creating a new user with a verification record that contains an SSO-only email domain should return a 422 `RequestError` with the error code `session.sso_required`.
- Updating a user profile with an SSO-only email domain should return a 422 `RequestError` with the error code `session.sso_required`.