Merge pull request #16175 from overleaf/bg-group-sso-restrict-login

restrict login methods to group SSO for managed users with group SSO linked

GitOrigin-RevId: d0a92f9dc16cc08a3afacb4ad4b9ce19b1fd1330

services/web/app/src/Features/Errors/Errors.js

@@ -96,6 +96,12 @@ class SAMLAuthenticationError extends OError {
   }
 }
 
+class SAMLAuthenticationRequiredError extends SAMLAuthenticationError {
+  get i18nKey() {
+    return 'saml_authentication_required_error'
+  }
+}
+
 class SAMLGroupSSOLoginIdentityMismatchError extends SAMLAuthenticationError {
   get i18nKey() {
     return 'saml_login_identity_mismatch_error'
@@ -269,6 +275,7 @@ module.exports = {
   InvalidError,
   NotInV2Error,
   OutputFileFetchFailedError,
+  SAMLAuthenticationRequiredError,
   SAMLIdentityExistsError,
   SAMLAlreadyLinkedError,
   SAMLEmailNotAffiliatedError,

services/web/locales/en.json

@@ -1546,6 +1546,7 @@
   "ru": "Russian",
   "saml": "SAML",
   "saml_auth_error": "Sorry, your identity provider responded with an error.  Please contact your administrator for more information.",
+  "saml_authentication_required_error": "Other login methods have been disabled by your group administrator. Please use your group SSO login.",
   "saml_create_admin_instructions": "Choose an email address for the first __appName__ admin account. This should correspond to an account in the SAML system. You will then be asked to log in with this account.",
   "saml_email_not_recognized_error": "This email address isn’t set up for SSO. Please check it and try again or contact your administrator.",
   "saml_identity_exists_error": "Sorry, the identity returned by your identity provider is already linked with a different Overleaf account.  Please contact your administrator for more information.",