Redirect on specific route if bad credentials

[damien-louis]

Hi, thanks for this great package.

I have a question: It's possible to catch when user returned by SSO is not found in provider? I don't want to create it automatically, just redirect it on a specific route.

Thanks.

[a-menshchikov]

@damien-louis hi.
If you do not configure saml.user_factory in your security settings, the Symfony\Component\Security\Core\Exception\UserNotFoundException will be thrown from the Nbgrp\OneloginSamlBundle\Security\Http\Authenticator\SamlAuthenticator::authenticate. To handle this exception you need to use the failure_handler (see https://symfony.com/doc/current/security.html#customize-successful-and-failed-authentication-behavior for details).

In some exotic cases you may be want to use user factory and redirect users selectively. To implement such logic you can decorate the Nbgrp\OneloginSamlBundle\EventListener\User\UserCreatedListener and throw Symfony\Component\Security\Core\Exception\AuthenticationException from it when need it.