Provide some kind of user feedback for unknown Relying Parties

[theseal]

Provide some kind of user feedback for unknown Relying Parties

[martin-lindstrom]

So, what does the error view say? Generally, we don't want to expose too detailed error messages for the user.

For some "unrecoverable" errors it is no point in having an "OK" button since the IdP don't know where to direct the user (since it is an invalid SP).

[theseal]

The same message as in the log might do it. Then the user get something in return which they can show the local helpdesk.
SAML SP 'https://release-check.qa.swamid.se/shibboleth' is not a registered BankID Relying Party

[martin-lindstrom]

I am very reluctant to displaying that kind of messages for users. The problem you are referring to can only happen if an unregistered SP invokes the IdP. But, what does the error say today?

Our idea was to be able to configure errors with ID:s that can be used when communicating the customer support. @felix-hellman We have configuration settings for that. Right?

[theseal]

Configurable error messages sounds good to me! Like this one?

bankid-saml-idp/bankid-frontend/src/locale/messages.json

Line 7 in 45bf441

"unknown-peer": "The sender of the authentication request has not been registered at the Identity Provider",

Is it a bug that no text is displayed then?

Also the documentation points to messages.js but it have been renamed?

[martin-lindstrom]

OK. I have been trying to ask you several time now. What is displayed? No text at all? That's clearly a bug.

[theseal]

Sorry. This is what it looks like:

Notice: We are not running the latest code (and therefor the SC logo) since @mikaelfrykholm did some local patches in order to get the redis cluster to work while waiting for #205

[martin-lindstrom]

OK. Thanks. Well, that's a bug!

[martin-lindstrom]

Fixed in PR #212. Will be included in 1.1.1.