Class: OpenLoam::Sso::DomainMismatchError
- Defined in:
- lib/open_loam/sso.rb
Overview
The verified email is on a domain this provider does not own. A provider only vouches for its OWN domain; letting it assert an email on another domain would let a tenant's IdP hijack a user of a different domain (cross-domain account takeover), so the flow refuses it.