From 9a2000744c4973daf7bc80a49f56fe4f54f7e9b0 Mon Sep 17 00:00:00 2001
From: Jason Volk <jason@zemos.net>
Date: Fri, 6 Mar 2026 05:49:56 +0000
Subject: [PATCH] Skip sentinel password migration when no SSO IdP configured.
 (59791db2132) (#313)

Signed-off-by: Jason Volk <jason@zemos.net>
---
 src/service/migrations.rs | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/service/migrations.rs b/src/service/migrations.rs
index 6a7b712f..bebef583 100644
--- a/src/service/migrations.rs
+++ b/src/service/migrations.rs
@@ -598,6 +598,11 @@ async fn fix_hashed_sentinel_passwords(services: &Services) -> Result {
 
 	const PASSWORD_SENTINEL: &str = "*";
 
+	if services.config.identity_provider.is_empty() {
+		debug!("Skipping sentinel password migration since no SSO IdP configured.");
+		return Ok(());
+	}
+
 	let db = &services.db;
 	let cork = db.cork_and_sync();
 	let userid_password = db["userid_password"].clone();