new user created at each connection about onelogin-saml-bundle HOT 5 CLOSED

Hello @likou31
Could you show your security settings (yaml) and your User class?

from onelogin-saml-bundle.

Actually I found a solution.

It was the provider's fault.

In the SamlUserProvider in loadUserByIdentifier(), it creates a new userClass everytime.
I created my own UserProvider that extends the SamlUserProvider, and I changed the method like this (I also changed the __construct method to add the repository) :

public function __construct(
        protected string $userClass,
        protected array $defaultRoles,
        protected UserRepository $repository,
        ManagerRegistry $doctrine
    ) {
        $this->repository = $doctrine->getManager()->getRepository('App:User');
        if (!is_a($userClass, UserInterface::class, true)) {
            throw new \InvalidArgumentException('The $userClass argument should be a class implementing the '.UserInterface::class.' interface.');
        }
    }

    public function loadUserByIdentifier(string $identifier): UserInterface
    {
        $user = $this->repository->loadUserByIdentifier($identifier);
        if ($user != null) {
            return $user;
        } else {
            return new $this->userClass($identifier, $this->defaultRoles);
        }
    }

If it can help anyone, I'll be happy !

from onelogin-saml-bundle.

In the SamlUserProvider in loadUserByIdentifier(), it creates a new userClass everytime.

It's exactly what it created for. If you want to load a user from database, the Entity User Provider might be suitable for you.

Also, I recommend you to read Just-in-time user provisioning section from README.

from onelogin-saml-bundle.

For my needs, I need to load it from the saml server, and persist the user. But not create each time a new user entity. (and I need to do the relation between others entities for example)

from onelogin-saml-bundle.

IIUC Just-in-time user provisioning is what you need. Use of the Saml User Factory is more convenient approach than the custom user provider which instantiates new User. But if it works for you and looks clearer, it's also good. =)

from onelogin-saml-bundle.