-
There's no particular reason to prevent the SAML plugin from creating auto-creating accounts if you're using remote usernames. Even in a multi-tenanted situation with many tenants using the same SSO, we can tell which institution a new user should go into because each SAML auth instance requires an institution identifier field from the SAML attributes. Change-Id: I7d7fd592aafe3d01cd92098977be82793f3376dd behatnotneeded: Requires external SAML IdP to test.
a3782238