mirror of
https://github.com/projectsend/projectsend.git
synced 2026-09-19 18:15:08 +00:00
ignacionelson
cf1cd3ab9a
Reported by Ricardo Cazati, who ticked "create an account on first sign-in" and "approve those accounts automatically", named his domain, and then found every colleague's account sitting in the approval queue with nothing anywhere saying why. The rule is right and stays: an address the provider has not confirmed goes to the queue whatever the box says, because inside one Entra tenant a colleague can present somebody else's address. What was missing is that Microsoft confirms nothing until `xms_edov` is added to the app registration — an administrator configuring their own company directory reads "verified" as already true of it. The tenant-ID field mentioned that claim, but only for the half about never attaching to an existing account. The other half — that this is also why auto-approval does nothing — now sits under the auto-approve checkbox itself, where the promise is made, and only when the three settings that produce the surprise are all on.