Unable to Create A New User When Password is Validated: config.saml_default_update_resource_hook not working

[mcollie1]

My application supports signing in with username/password and SSO. Logging in with an existing user works as expected, but when adding a new user via the IDP interface, my application throws ActiveRecord::RecordInvalid (Validation failed: Password can't be blank)

I read your suggestion to use config.saml_default_update_resource_hook after config.saml_create_user, but that doesn't work as the devise validation, on create new user, happens before the proc is called, triggering the error.

Any suggestion on how to proceed?

[adamstegman]

In default operation, the new user is saved using the saml_update_resource_hook:

devise_saml_authenticatable/lib/devise_saml_authenticatable/model.rb

Lines 68 to 70 in 2d47b4f

	if Devise.saml_update_user || (resource.new_record? && Devise.saml_create_user)
	begin
	Devise.saml_update_resource_hook.call(resource, decorated_response, auth_value)

.

Can I see your devise SAML configuration from config/initializers/devise.rb, with any credentials or secrets removed?