When an IdP is unavailable, FusionAuth should prevent users from being forwarded to the Third Party Login page

[jaywood128]

When an IdP is unavailable, FusionAuth should prevent users from being forwarded to Third Party Login pages

Problem

Scenario A: When a login URL is appended with idp_hint, a user is forwarded to a Third Party Login page to perform a Federated login. The IdP service is down and the user is not redirected back to the FusionAuth-hosted login pages.

Scenario B: A user visits their application's login page (FusionAuth hosted login page) and clicks a Login with ... button and is directed to authenticate against their IdP.

In either scenario, if the Third Party IdP is down, users are stuck on the IdP's webpage and not the initial login page.

Solutions

Solution for Scenario A: When an IdP is unavailable, a user is redirected back to the FusionAuth-hosted login page after being forwarded to the IdP, or a user is initially directed to the FusionAuth-hosted login page without a Third Party login button.

Solution for Scenario B: When a user clicks the Login with .. button, and the service is unavailable, an error to the user is displayed to the effect of [Idenity Provider] is currently unavailable. Please login with your [application name] credentials. The user is not redirected upon clicking the button.

Alternatives/workarounds

FusionAuth users write code to call their respective IdP(s) and conditionally render their Third Party login button.

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

How to vote

Please give us a thumbs up or thumbs down as a reaction to help us prioritize this feature. Feel free to comment if you have a particular need or comment on how this feature should work.