I wanted to point out that there’s a noticeable increase in performance in this version. I assume it’s related to the change in log level writing. Regardless of why, I’m happy about it. Thanks!
Also of note, the Logout button takes you to the /login page, which we have disabled from public access (via our load-balancer) due to there not being any way of turning off the local admin account entirely and there not being any way to restrict who can access the /login page within PSU, so with this behavior if I were to use the Logout button in our setup while accessing PSU publicly, it would result in a timeout due to the inability to reach the /login page from the internet. @adam, a better design may be to just take users to the base PSU path rather than taking them to /login, so it uses whatever the setup uses for the default login method.
Redirecting to the login page, even when using SSO, was actually a feature request that needs a configuration option to allow users to hide\disable the page completely and just redirect to the desired resource. Having a login page allows the user to select their authentication method when multiple are defined.
That said, we need better logic. It shouldn’t redirect to the login page at all if only one auth method is defined and it’s SSO\external auth.
We have requests for multiple auth methods of the same type, etc and that complicates the story but not the case right now.
As in entirely separate SAML setups (i.e., Azure and Google at the same time), or as in multiple of the same “brand” (i.e., 2 separate Azure tenants at the same time)?
I don’t think it would matter in the end. You could just have multiple authentication methods of certain types or provider. For example, forms or client cert wouldn’t work this way.
You could have two azure tenants and configure two auth methods. They would need to be named, and we would need some mechanism for the user to select which to auth to.
It would also be possible to configure the preferred authentication and maybe even enforce certain auth for certain APIs or apps (also open feature requests).