New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SSO Domain Verification Expiring After A Week #4051
Comments
Hi @kannasama, Thank you for this report. Just to make sure that you and I are on the same page, in step 3, the domain you set shows as (Verified), as shown in the screenshot here, correct? Meaning, it remains verified for one week, and then is completely removed from the Domain Verification menu, correct? Thank you, |
Yes, that is correct. It appears that there are no automatic reverification
attempts being made.
…On Sun, May 5, 2024 at 8:49 AM SergeantConfused ***@***.***> wrote:
Hi @kannasama <https://github.com/kannasama>,
Thank you for this report. Just to make sure that you and I are on the
same page, in step 3, the domain you set shows as (Verified), as shown in
the screenshot here
<https://bitwarden.com/help/domain-verification/#managing-domains>,
correct? Meaning, it remains verified for one week, and then is completely
removed from the Domain Verification menu, correct?
Thank you,
—
Reply to this email directly, view it on GitHub
<#4051 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/ACAK4IPLYTHDDYNCEUBCZMTZAYTEBAVCNFSM6AAAAABHGDZ7G6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAOJUG44TKNBYGI>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
--
Michael J. Hill
***@***.***
|
At this time, there is no regular check once the domain is verified. "Regular check" is on our radar for future improvement. |
Just for clarification. The expected behavior right now is, after the initial verification is completed, an admin goes in and manually clicks the reverify link each week? |
Steps To Reproduce
Expected Result
Domain verification to complete automatically on a regular basis.
Actual Result
Domain verification is removed after approximately one week. This can be extended by manually triggering the verification process.
Screenshots or Videos
No response
Additional Context
It appears that the the automated process to actually trigger the verification check does not occur. If there were an API call, or URL that could be called where a scheduled task could be configured to run this, I would be fine with that. That said, this is something that should be handled in an automated process.
Additionally, while I can understand the need for domain verification in hosted solutions, perhaps some option could be available to exempt self-hosted, single organization instances from this requirement for SSO.
Githash Version
1e3e937-dirty
Environment Details
No response
Database Image
No response
Issue-Link
#2480
Issue Tracking Info
The text was updated successfully, but these errors were encountered: