{"action":"created","issue":{"url":"https://api.github.com/repos/pantheon-systems/cli/issues/446","labels_url":"https://api.github.com/repos/pantheon-systems/cli/issues/446/labels{/name}","comments_url":"https://api.github.com/repos/pantheon-systems/cli/issues/446/comments","events_url":"https://api.github.com/repos/pantheon-systems/cli/issues/446/events","html_url":"https://github.com/pantheon-systems/cli/issues/446","id":104512939,"number":446,"title":"Users in SAML enabled organizations can't use Terminus","user":{"login":"suzannealdrich","id":1848316,"avatar_url":"https://avatars.githubusercontent.com/u/1848316?v=3","gravatar_id":"","url":"https://api.github.com/users/suzannealdrich","html_url":"https://github.com/suzannealdrich","followers_url":"https://api.github.com/users/suzannealdrich/followers","following_url":"https://api.github.com/users/suzannealdrich/following{/other_user}","gists_url":"https://api.github.com/users/suzannealdrich/gists{/gist_id}","starred_url":"https://api.github.com/users/suzannealdrich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/suzannealdrich/subscriptions","organizations_url":"https://api.github.com/users/suzannealdrich/orgs","repos_url":"https://api.github.com/users/suzannealdrich/repos","events_url":"https://api.github.com/users/suzannealdrich/events{/privacy}","received_events_url":"https://api.github.com/users/suzannealdrich/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/pantheon-systems/cli/labels/Bug","name":"Bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-09-02T15:49:24Z","updated_at":"2015-09-02T18:11:29Z","closed_at":null,"body":"**Summary:** As a user in an organization that has SAML enabled for email addresses matching the organization's domain, I cannot use Terminus to perform any commands on my sites.\r\n\r\n**Scope:** Users in organizations with SAML enabled whose account email addresses match the organization's domain. Users whose emails don't match can successfully authenticate with their dashboard passwords and perform Terminus commands.\r\n\r\n**Symptoms:**\r\n\r\n```\r\n$ terminus cli version\r\nTerminus version: 0.7.1\r\nTerminus script: terminus\r\n\r\n$ terminus auth login\r\nYour email address?: suzanne@********\r\nYour dashboard password (input will not be shown):\r\nLogging in as suzanne@*******\r\nSaving session data\r\n\r\n        .+.\r\n        .+?:\r\n         .+??.\r\n           ??? .\r\n           +???.\r\n      +?????????=.\r\n      .???????????.\r\n      .????????????.\r\n\r\n     ########### ########\r\n     ############.#######.\r\n     ####### ####  .......\r\n     ######## #### #######                50 41 4E 54 48 45 4F 4E\r\n     #########.####.######        _____________  __  ________  ____  ______\r\n     ######  ...                 /_  __/ __/ _ \\/  |/  /  _/ |/ / / / / __/\r\n     #######.??.##########        / / / _// , _/ /|_/ // //    / /_/ /\\ \\\r\n     #######~+??.#########       /_/ /___/_/|_/_/  /_/___/_/|_/\\____/___/\r\n     ########.??..\r\n     #########.??.#######.\r\n     #########.+?? ######.\r\n               .+?.\r\n         .????????????.\r\n           +??????????,\r\n            .????++++++.\r\n              ????.\r\n              .???,\r\n               .~??.\r\n                 .??\r\n                  .?,.\r\n\r\n$ terminus auth whoami\r\nYou are authenticated as suzanne@*******\r\n\r\n$ terminus sites list\r\nError: Request Failure: Client error response\r\n[status code] 401\r\n[reason phrase] Unauthorized\r\n[url] https://dashboard.getpantheon.com/api/users//memberships/sites?limit=100\r\n```\r\n\r\n**Steps To Reproduce:**\r\n\r\n1. Be a user with an email address in an organization with SAML enabled.\r\n2. Authenticate as that user with Terminus\r\n3. Attempt any Terminus commands\r\n\r\n**Known Workarounds:** Login as a user who is a member of the organization, but whose email address doesn't match the domain for the SAML-enabled org."},"comment":{"url":"https://api.github.com/repos/pantheon-systems/cli/issues/comments/137195077","html_url":"https://github.com/pantheon-systems/cli/issues/446#issuecomment-137195077","issue_url":"https://api.github.com/repos/pantheon-systems/cli/issues/446","id":137195077,"user":{"login":"ari-gold","id":7874556,"avatar_url":"https://avatars.githubusercontent.com/u/7874556?v=3","gravatar_id":"","url":"https://api.github.com/users/ari-gold","html_url":"https://github.com/ari-gold","followers_url":"https://api.github.com/users/ari-gold/followers","following_url":"https://api.github.com/users/ari-gold/following{/other_user}","gists_url":"https://api.github.com/users/ari-gold/gists{/gist_id}","starred_url":"https://api.github.com/users/ari-gold/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ari-gold/subscriptions","organizations_url":"https://api.github.com/users/ari-gold/orgs","repos_url":"https://api.github.com/users/ari-gold/repos","events_url":"https://api.github.com/users/ari-gold/events{/privacy}","received_events_url":"https://api.github.com/users/ari-gold/received_events","type":"User","site_admin":false},"created_at":"2015-09-02T18:11:29Z","updated_at":"2015-09-02T18:11:29Z","body":"Also see https://github.com/pantheon-systems/cli/issues/291\r\n\r\nHey @suzannealdrich !!"}}