Skip to content

handle disabled password management #81

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wojcik91 wants to merge 2 commits into
base: dev
Choose a base branch
from
Open

handle disabled password management #81

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c62f4b4
update enrollment messages to handle disabled password management
wojcik91 Jun 25, 2026
5047b8c
Merge branch 'dev' into disable_password_management
wojcik91 Jun 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion common/client_types.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,11 @@ message InitialUserInfo {
repeated string device_names = 7;
bool enrolled = 8;
bool is_admin = 9;
// When true, this user is managed by an external identity provider (LDAP/AD/OIDC)
// whose administrator disabled local password management. The client must not prompt
// for local password creation during enrollment, and the password reset option must
// be hidden. Defaults to false for local users.
bool password_management_disabled = 10;
}

message EnrollmentSettings {
Expand All @@ -68,7 +73,10 @@ message EnrollmentStartResponse {

message ActivateUserRequest {
optional string phone_number = 1;
string password = 2;
// Omitted for externally-managed users whose provider disabled local password
// management (see InitialUserInfo.password_management_disabled). Core must not call
// set_password when this is absent.
optional string password = 2;
optional string token = 3;
}

Expand Down
Loading