Display Name of known users resolving before entering password
⚙️Configuration🪵Login☁️Zitadel Cloud❓Question✅Solved
I am setting up Zitadel Cloud for web app login, currently using the OIDC Web App.
When a login of a registered user is entered, the next password entry step shows a dropdown symbol, where this login is equipped with the display name.
This happens instantly, before any password check. Furthermore, all logins so resoved are maintained in this list until explicitly deleted.
So on a public website I can guess logins and instantly see display names (which are first + last name by default) without ever needing to enter a password.
Is there a way to disable this?
When a login of a registered user is entered, the next password entry step shows a dropdown symbol, where this login is equipped with the display name.
This happens instantly, before any password check. Furthermore, all logins so resoved are maintained in this list until explicitly deleted.
So on a public website I can guess logins and instantly see display names (which are first + last name by default) without ever needing to enter a password.
Is there a way to disable this?
