Introduction
This article explains when SAML users are asked for a password when attempting to edit their profile or configure the "Set Me Up" section for package types in the JFrog Platform UI.
This typically occurs because the platform defaults to requiring an internal password for profile modifications, even for users authenticated via an external Identity Provider (IdP).
Resolution
Step 1: Verify the Scope of the Issue
Before making changes, verify if this password prompt is appearing for all users or only a specific user.
Step 2: Individual User Resolution
If the issue is limited to a few specific users, you can disable the password requirement for them individually:
- Navigate to User Management -> Users.
- Select the specific user to edit their profile.
- Locate the checkbox labeled Disable Internal Password Login.
If it is unchecked, check this box and save your changes to see if the behavior persists.
Step 3: Global Resolution
If the issue is occurring for all users, you can disable the internal password requirement at the global level:
- Navigate to the Administration tab in the Artifactory UI.
- Go to Security -> General.
- Under the Basic Authentication section, enable the checkbox for Disable Internal Password Login.
Please note:
Before disabling the basic authentication method, a few necessary steps, such as creating an internal group granted with Admin permissions, need to be taken to prevent a lock on your instance, for more information please see here.
Also, keep in mind that only the users explicitly listed under Basic Authentication will be able to log in to Artifactory using an internal password. Please add any users who should retain Basic Authentication access in the section "Internal users allowed to use basic authentication".
Conclusion
By following these steps, you can ensure that SAML users are no longer interrupted by internal password prompts when managing their profiles or using the "Set Me Up" feature. Whether you apply this change to individual users or across the entire platform, disabling the internal password login streamlines the authentication experience for your SSO-enabled workforce.