Dysfunctional SSO buttons in "Confirm your identity" modal

[redburn]

Describe the bug

SSO login buttons are injected into Craft's "Confirm your identity" modal, where they don't work. Clicking them either does nothing (observed when setting up MFA for a user) or discards your form input when you return to Craft (observed when creating a new user account from the CP). These actions need to be completed with the user's actual Craft password, they apparently can't be completed via SSO.

Unless that can be changed, I would suggest removing the SSO icons from "Confirm your identity" modals.

Steps to reproduce

1. Set up SSO, e.g. with Microsoft Entra
2. Signing into Craft works fine
3. Create a new user from the CP, or set up MFA as a user
4. Receive a "Confirm your identity" modal from Craft
5. Click a SSO icon that appears under the password form

Craft CMS version

5.10.13.2

Plugin version

2.0.15

Multi-site?

No

Additional context

Microsoft Entra enabled as provider, but probably provider-agnostic.

[engram-design]

Related to the discussion in #18 and indeed its an issue for Craft’s "Confirm your identity" modal, which is for an elevated session. We'd love to have password-less support for elevated sessions, but that's very likely a Craft core need, as opposed to something we can roll on our end.

Fixed for the next release. To get this early, run composer require verbb/social-login:"dev-craft-5 as 2.0.15".

[redburn]

Thanks!

[redburn]

The SSO option seems to be partially hidden from view but you can still see a few pixels of the text at the bottom:

Then when there's a validation error it reappears:

Also in the next step (MFA):

[engram-design]

Just added a few more tweaks to this. To get this early, run composer require verbb/social-login:"dev-craft-5 as 2.0.16".

[martinhj]

Sorry for the inconvenience, but in a project we just launched, we are using this feature, however somewhat broken. Could I suggest that this functionality still could be enabled through the config/social-login.php file?

[redburn]

How are you using it? Does it ever work in the "Confirm your identity" modal? For me, SSO never worked for an elevated session.

[martinhj]

Yes, it works. But changes made that triggered the Confirm identity flow is lost, and needs to be reentered and resaved. But then, before timing out, the identity is already confirmed and we can save the changes.
Not much to write home about, and that is why I suggested it to be a config file option, not a toggle or anything. Just don't want the functionality to disappear for the users that already has gotten used to this broken flow.

[engram-design]

@martinhj Just added the enableCpElevatedLogin config setting, if that helps!

To get this early, run composer require verbb/social-login:"dev-craft-5 as 2.0.16".