[v10] Enterprise connections don't strip domain from email #543
Labels
enhancement
An enhancement or improvement to the SDK that could not be otherwise categorized as a new feature
Milestone
Say you have an enterprise connection, with
fabrikam.com
set as domain (for HRD). If the user types[email protected]
, he will be asked to type his corporate credentials (both Lock versions will even suggestjon
as the username).If, at this moment, the user types his or her email _again_ (thinking that this is the username Lock is expecting), :)
@fabrikam.com
) (see https://github.com/auth0/lock/blob/v9/index.js#L1144). So, since only the username is sent in the background, authentication succeeds anyway. (By the way, this only works for the first domain of an enterprise connection).Is this difference on purpose and users should type the correct username now, or was this an omission and Lock v10 should behave like Lock v9 for this?
The text was updated successfully, but these errors were encountered: