On Fri, Oct 18, 2013 at 02:52:41AM -0700, Dominic Cleal wrote:
> 
> That makes sense, but in that case I still don't see why the user needs a setting for it.  Sounds like something we should handle internally - whether that's fixed for now until we support setting it by realm or otherwise.

Well, they need to specify
authorize_login_delegation_auth_source_user_autocreate
anyway. We can state for now that the value of that parameter has to
be External and check that.

Or do you want the setting to be just boolean? I suspect that will be
harder to change into string later.

-- 
Jan Pazdziora
Principal Software Engineer, Identity Management Engineering, Red Hat