Cannot remove old device sessions when the auth backend is SAML

[oblak-be]

Description

My Matrix homeserver makes use of SSO (SAML), so authentication is handled by the IAM software. This works fine for the most part, but when I try to remove an old device sessions Riots asks for a confirmation by password, where the SSO password doesn't work.

Steps to reproduce

• Setup matrix hs with SAML backend + setup Riot client
• login a couple of times with a (test) account in different browser sessions
• nagivate to the user settings -> security & privacy
• delete one of the device sessions (tick the box, click delete)
• add your accounts password , it should fail

Version information

• Platform: web + desktop

For the web app:

• Browser: Firefox
• OS: Debian
• URL: ...

For the desktop app:

• OS: Debian
• Version: 1.5.15
  

[t3chguy]

matrix-org/synapse#5667 (comment)