Settings -> Groups allows assignment of Global Role to an arbitrary User, not just Groups, with SAML Authentication Provider configured

[gaktive]

Internal reference: SURE-6436
Reported in 2.7.3

We originally did some work to fix this in #6932 but another scenario arose; whether it implies regression or an expansion of the original issue is something to research. (That ticket has a long history that @richard-cox may assist upon jogging his own memory.)

Currently, to reproduce:

• Users & Authentification -> Groups -> Assign Global Roles
• Add text "saytest\iaminagroup" -> Enter -> Save

The result is that the Group Name systest\iaminagroup was created

Per @nwmac, this may be tied to false search results from SAML, which means backend help is required but we may be limited. There may be a backend ticket somewhere already but I couldn't find one easily.

[nwmac]

I think this is the same root cause as #8361

I believe this will require a backend fix

[gaktive]

@Shavindra or @nwmac is there a backend ticket to track what UI needs here? I can follow up if you can point me to one but let me know if one needs to be filed still.

[Shavindra]

@gaktive not that I am ware of
CC: @nwmac

[gaktive]

OK @Shavindra if we need backend to do something, can you file a ticket?

[gaktive]

@nwmac may know where the appropriate existing backend ticket is.

[samjustus]

We completed the backend work for this a few weeks ago FYI @gaktive