passbolt-styleguide 3.8.4 → 3.9.0-alpha2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "passbolt-styleguide",
-  "version": "3.8.4",
+  "version": "3.9.0-alpha2",
   "license": "AGPL-3.0",
   "copyright": "Copyright 2022 Passbolt SA",
   "description": "Passbolt styleguide contains common styling assets used by the different sites, plugin, etc.",
@@ -76,6 +76,23 @@
   "overrides": {
     "glob-stream": {
       "glob-parent": "5.1.2"
+    },
+    "eslint-plugin-import": {
+      "debug": "3.2.7"
+    },
+    "webpack-dev-server": {
+      "compression": {
+        "debug": "3.2.7"
+      },
+      "express": {
+        "debug": "3.2.7"
+      },
+      "serve-index": {
+        "debug": "3.2.7"
+      }
+    },
+    "i18next-parser": {
+      "debug": "3.2.7"
     }
   },
   "scripts": {

package/src/img/controls/attention.svg

@@ -0,0 +1 @@
+<svg id="attention" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 170 170" shape-rendering="geometricPrecision" text-rendering="geometricPrecision"><style><![CDATA[#attention-u-bar {animation-name:attention-u-bar_c_o, attention-u-bar_s_do;animation-duration:1000ms;animation-fill-mode:forwards;animation-timing-function:linear;animation-direction:normal;animation-iteration-count:1;}@keyframes attention-u-bar_c_o {0%{opacity:0}30%{opacity:0}40%{opacity:1}100%{opacity:1}}@keyframes attention-u-bar_s_do{0%{stroke-dashoffset: 31.0938}40%{troke-dashoffset: 31.0938;animation-timing-function: cubic-bezier(0.23,1,0.32,1)}90%{stroke-dashoffset: 62.19}100%{stroke-dashoffset: 62.19}}#attention-u-dot{animation: attention-u-dot_c_o 1000ms linear 1 normal forwards}@keyframes attention-u-dot_c_o{0%{opacity: 0}90%{opacity: 0}100%{opacity: 1}}#attention-s-ellipse1{animation: attention-s-ellipse1_s_do 1000ms linear 1 normal forwards}@keyframes attention-s-ellipse1_s_do{0%{stroke-dashoffset: 521.5;animation-timing-function: cubic-bezier(0.23,1,0.32,1)}80%{stroke-dashoffset: 1043}100%{stroke-dashoffset: 1043}}]]></style><path id="attention-u-bar" d="M85.0508,62.1046v31.0938" transform="matrix(-1.192422 0 0-1.192423 186.467239 160.725772)" opacity="0" fill="none" stroke="#d40101" stroke-width="6.7" stroke-linecap="round" stroke-linejoin="round" stroke-dashoffset="31.0938" stroke-dasharray="31.0938"/><path id="attention-u-dot" d="M85.0508,124.292h.1166" transform="translate(.000001-9.519165)" opacity="0" fill="none" stroke="#d40101" stroke-width="6.7" stroke-linecap="round" stroke-linejoin="round" stroke-dashoffset="0.23" stroke-dasharray="0.1166"/><circle id="attention-s-ellipse1" r="83" transform="translate(85 85)" fill="none" stroke="#d40101" stroke-width="4" stroke-linecap="round" stroke-dashoffset="521.5" stroke-dasharray="521.5"/></svg>

package/src/locales/en-UK/common.json

@@ -2,6 +2,7 @@
   "(folder)": "(folder)",
   "(Folder) new owner:": "(Folder) new owner:",
   "(group)": "(group)",
+  "(not yet available)": "(not yet available)",
   "(tag)": "(tag)",
   "{{count}} entry had errors and will be ignored during synchronization._one": "{{count}} entry had errors and will be ignored during synchronization.",
   "{{count}} entry had errors and will be ignored during synchronization._other": "{{count}} entries had errors and will be ignored during synchronization.",
@@ -26,6 +27,8 @@
   "{{count}} user will be synchronized._one": "{{count}} user will be synchronized.",
   "{{count}} user will be synchronized._other": "{{count}} users will be synchronized.",
   "{{requesterFirstname}} did not initiate this request.": "{{requesterFirstname}} did not initiate this request.",
+  "{errors.get(key)}": "{errors.get(key)}",
+  "{this.state.warnings.get(key)}": "{this.state.warnings.get(key)}",
   "@your-domain.com": "@your-domain.com",
   "<0>{{activityCreatorName}}</0> accepted the account recovery policy": "<0>{{activityCreatorName}}</0> accepted the account recovery policy",
   "<0>{{activityCreatorName}}</0> accessed secret of item <2>{{resourceName}}</2>": "<0>{{activityCreatorName}}</0> accessed secret of item <2>{{resourceName}}</2>",
@@ -48,30 +51,29 @@
   "<0>4. Scan the QR codes with your phone.</0>": "<0>4. Scan the QR codes with your phone.</0>",
   "<0>5. And you are done!</0>": "<0>5. And you are done!</0>",
   "<0>Warning:</0> These are the settings provided by a configuration file. If you save it, will ignore the settings on file and use the ones from the database.": "<0>Warning:</0> These are the settings provided by a configuration file. If you save it, will ignore the settings on file and use the ones from the database.",
+  "<0>Warning</0>: This secret will expire after some time (typically a few months). Make sure you save the expiry date and rotate it on time.": "<0>Warning</0>: This secret will expire after some time (typically a few months). Make sure you save the expiry date and rotate it on time.",
+  "<0>Where to find it?</0>": "<0>Where to find it?</0>",
   "1. Install the application from the store.": "1. Install the application from the store.",
   "2. Open the application on your phone.": "2. Open the application on your phone.",
   "3. Click start, here, in your browser.": "3. Click start, here, in your browser.",
   "4. Scan the QR codes with your phone.": "4. Scan the QR codes with your phone.",
   "5. And you are done!": "5. And you are done!",
-  "A client identifier is required.": "A client identifier is required.",
   "A comment is required.": "A comment is required.",
   "A comment must be less than 256 characters": "A comment must be less than 256 characters",
   "A connection could be established. Well done!": "A connection could be established. Well done!",
+  "A domain is required.": "A domain is required.",
   "A domain name is required.": "A domain name is required.",
   "A download of the organization private key has automatically started.": "A download of the organization private key has automatically started.",
   "A download of your recovery kit, containing your secret key, has automatically started.": "A download of your recovery kit, containing your secret key, has automatically started.",
   "A file is required.": "A file is required.",
   "A first name is required.": "A first name is required.",
   "A host is required.": "A host is required.",
-  "A hostname is required.": "A hostname is required.",
   "A last name is required.": "A last name is required.",
   "A name can not be more than 256 char in length.": "A name can not be more than 256 char in length.",
   "A name is required.": "A name is required.",
   "A passphrase is required.": "A passphrase is required.",
   "A password is required.": "A password is required.",
   "A port is required.": "A port is required.",
-  "A salt is required.": "A salt is required.",
-  "A secret key is required.": "A secret key is required.",
   "A strong passphrase is required. The minimum complexity must be &#39;fair&#39;": "A strong passphrase is required. The minimum complexity must be &#39;fair&#39;",
   "A subscription key is required.": "A subscription key is required.",
   "A tag name is required.": "A tag name is required.",
@@ -89,6 +91,7 @@
   "Activation pending": "Activation pending",
   "Active Directory": "Active Directory",
   "Activity": "Activity",
+  "Add": "Add",
   "Add a comment": "Add a comment",
   "Add a description": "Add a description",
   "Add a unique import tag to passwords": "Add a unique import tag to passwords",
@@ -108,21 +111,27 @@
   "All groups": "All groups",
   "All items": "All items",
   "All tags": "All tags",
+  "All the users with an email address ending with the domain in the safe list are allowed to register on passbolt.": "All the users with an email address ending with the domain in the safe list are allowed to register on passbolt.",
   "All users": "All users",
+  "Allowed domains": "Allowed domains",
+  "Allows Azure and Passbolt API to securely share information.": "Allows Azure and Passbolt API to securely share information.",
   "Also delete items inside this folder.": "Also delete items inside this folder.",
   "Alternatively you can also get in touch with support on community forum or via the paid support channels.": "Alternatively you can also get in touch with support on community forum or via the paid support channels.",
   "An email is required.": "An email is required.",
-  "An integration key is required.": "An integration key is required.",
+  "An error occured during the sign-in via SSO.": "An error occured during the sign-in via SSO.",
   "An organization key is required.": "An organization key is required.",
+  "Application (client) ID": "Application (client) ID",
   "Apply": "Apply",
   "Approve": "Approve",
   "Approved": "Approved",
+  "Are you sure to disable the self registration for the organization ?": "Are you sure to disable the self registration for the organization ?",
   "Are you sure you want to delete <1>{{user}}</1>?": "Are you sure you want to delete <1>{{user}}</1>?",
   "Are you sure you want to delete the comment?": "Are you sure you want to delete the comment?",
   "Are you sure you want to delete the folder <1>{{folderName}}</1>?": "Are you sure you want to delete the folder <1>{{folderName}}</1>?",
   "Are you sure you want to delete the group <1>{{groupName}}</1>?": "Are you sure you want to delete the group <1>{{groupName}}</1>?",
   "Are you sure you want to delete the password <1>{{resourceName}}</1>?": "Are you sure you want to delete the password <1>{{resourceName}}</1>?",
   "Are you sure you want to delete the tag <1>{{tagName}}</1>?": "Are you sure you want to delete the tag <1>{{tagName}}</1>?",
+  "Are you sure you want to disable the current Single Sign-On settings?": "Are you sure you want to disable the current Single Sign-On settings?",
   "Are you sure?": "Are you sure?",
   "As soon as an administrator validates your request you will receive an email link to complete the process.": "As soon as an administrator validates your request you will receive an email link to complete the process.",
   "Authentication method": "Authentication method",
@@ -131,6 +140,8 @@
   "Backup of the private key and passphrase will not be stored. This is the safest option.": "Backup of the private key and passphrase will not be stored. This is the safest option.",
   "Base DN": "Base DN",
   "Before getting started...": "Before getting started...",
+  "Before saving the settings, we need to test if the configuration is working.": "Before saving the settings, we need to test if the configuration is working.",
+  "Beta": "Beta",
   "Both the private key and passphrase are required to recover your account.": "Both the private key and passphrase are required to recover your account.",
   "Browse": "Browse",
   "Browse credentials": "Browse credentials",
@@ -164,6 +175,7 @@
   "Completing recover. Please wait...": "Completing recover. Please wait...",
   "Completing setup, please wait...": "Completing setup, please wait...",
   "Configure another phone": "Configure another phone",
+  "Configuring SSO access, please wait...": "Configuring SSO access, please wait...",
   "Confirm Organization Recovery Key download": "Confirm Organization Recovery Key download",
   "Congratulation! Passbolt extension has been installed.": "Congratulation! Passbolt extension has been installed.",
   "Contact Sales": "Contact Sales",
@@ -226,15 +238,22 @@
   "Delete users": "Delete users",
   "deleted": "deleted",
   "Description": "Description",
+  "Directory (tenant) ID": "Directory (tenant) ID",
   "Directory configuration": "Directory configuration",
+  "Directory ID": "Directory ID",
   "Directory type": "Directory type",
   "Disable": "Disable",
   "Disable (Default)": "Disable (Default)",
   "Disable MFA": "Disable MFA",
+  "Disable self registration": "Disable self registration",
+  "Disable Single Sign-On settings?": "Disable Single Sign-On settings?",
   "Disabled": "Disabled",
   "Do not store sensitive data or click here to enable encryption for the description field.": "Do not store sensitive data or click here to enable encryption for the description field.",
   "Do not store sensitive data. Unlike the password, this data is not encrypted. Upgrade to version 3 to encrypt this information.": "Do not store sensitive data. Unlike the password, this data is not encrypted. Upgrade to version 3 to encrypt this information.",
+  "Do you need help?": "Do you need help?",
+  "domain": "domain",
   "Domain": "Domain",
+  "Don&apos;t forget to save your settings to apply your modification.": "Don&apos;t forget to save your settings to apply your modification.",
   "Download {{browserName}}": "Download {{browserName}}",
   "Download again": "Download again",
   "Download backup": "Download backup",
@@ -254,6 +273,7 @@
   "Email Address": "Email Address",
   "Email content visibility": "Email content visibility",
   "Email delivery": "Email delivery",
+  "Email domain safe list": "Email domain safe list",
   "Email Notification": "Email Notification",
   "Email Notifications": "Email Notifications",
   "Email prefix": "Email prefix",
@@ -303,6 +323,7 @@
   "For any change or question related to your passbolt subscription, kindly contact our sales team.": "For any change or question related to your passbolt subscription, kindly contact our sales team.",
   "For more information about account recovery, checkout the dedicated page on the help website.": "For more information about account recovery, checkout the dedicated page on the help website.",
   "For more information about email notification, checkout the dedicated page on the help website.": "For more information about email notification, checkout the dedicated page on the help website.",
+  "For more information about SSO, checkout the dedicated page on the help website.": "For more information about SSO, checkout the dedicated page on the help website.",
   "For Openldap only. Defines which group object to use.": "For Openldap only. Defines which group object to use.",
   "For Openldap only. Defines which user object to use.": "For Openldap only. Defines which user object to use.",
   "For security reasons please check with your administrator that this is a change that they initiated. The new fingerprint:": "For security reasons please check with your administrator that this is a change that they initiated. The new fingerprint:",
@@ -334,6 +355,7 @@
   "host": "host",
   "Hostname": "Hostname",
   "How do I configure a {settings.provider.name} SMTP server?": "How do I configure a {settings.provider.name} SMTP server?",
+  "How do I configure a AzureAD SSO?": "How do I configure a AzureAD SSO?",
   "How do you want to proceed?": "How do you want to proceed?",
   "I accept the <1>privacy policy</1>": "I accept the <1>privacy policy</1>",
   "I accept the <1>terms</1>": "I accept the <1>terms</1>",
@@ -349,6 +371,7 @@
   "If there was an issue during the transfer, either the operation was cancelled on the mobile side, or the authentication token expired.": "If there was an issue during the transfer, either the operation was cancelled on the mobile side, or the authentication token expired.",
   "If this does not work get in touch with support.": "If this does not work get in touch with support.",
   "If this is empty then it will be queried from the RootDSE.": "If this is empty then it will be queried from the RootDSE.",
+  "If users lose their private key and passphrase they will not be able to recover their account.": "If users lose their private key and passphrase they will not be able to recover their account.",
   "If you changed systems, or reinstalled passbolt web extension in the meantime, you will need to start the account recovery process from scratch.": "If you changed systems, or reinstalled passbolt web extension in the meantime, you will need to start the account recovery process from scratch.",
   "If you do not have access, you can request a new account recovery to an administrator.": "If you do not have access, you can request a new account recovery to an administrator.",
   "If you do not have access, you can request an account recovery to an administrator.": "If you do not have access, you can request an account recovery to an administrator.",
@@ -410,6 +433,7 @@
   "Loading...": "Loading...",
   "Location": "Location",
   "login": "login",
+  "Login URL": "Login URL",
   "Logs": "Logs",
   "Lower case": "Lower case",
   "Make sure you store it in a safe place. You may need it later.": "Make sure you store it in a safe place. You may need it later.",
@@ -465,6 +489,7 @@
   "No resources will be synchronized.": "No resources will be synchronized.",
   "No result match your search. Try with another search term.": "No result match your search. Try with another search term.",
   "No results match": "No results match",
+  "No SSO provider available": "No SSO provider available",
   "no url provided": "no url provided",
   "no username provided": "no username provided",
   "No Users Directory is configured. Enable it to synchronise your users and groups with passbolt.": "No Users Directory is configured. Enable it to synchronise your users and groups with passbolt.",
@@ -485,6 +510,8 @@
   "Once the comment is deleted, it’ll be removed permanently and will not be recoverable.": "Once the comment is deleted, it’ll be removed permanently and will not be recoverable.",
   "Once the password is deleted, it’ll be removed permanently and will not be recoverable.": "Once the password is deleted, it’ll be removed permanently and will not be recoverable.",
   "Once the tag is deleted, it’ll be removed permanently and will not be recoverable.": "Once the tag is deleted, it’ll be removed permanently and will not be recoverable.",
+  "Only administrators can invite users to register.": "Only administrators can invite users to register.",
+  "Only administrators would be able to invite users to register. ": "Only administrators would be able to invite users to register. ",
   "Only numeric characters allowed.": "Only numeric characters allowed.",
   "Only synchronize enabled users (AD)": "Only synchronize enabled users (AD)",
   "Only the group manager can add new people to a group.": "Only the group manager can add new people to a group.",
@@ -537,10 +564,11 @@
   "Please install the browser extension.": "Please install the browser extension.",
   "Please make sure there is at least one group manager.": "Please make sure there is at least one group manager.",
   "Please make sure there is at least one owner.": "Please make sure there is at least one owner.",
+  "Please review carefully this configuration as it will not be trivial to change this later.": "Please review carefully this configuration as it will not be trivial to change this later.",
+  "Please review carefully this configuration.": "Please review carefully this configuration.",
   "Please try again later or contact your administrator.": "Please try again later or contact your administrator.",
   "Please wait, while your request is processed.": "Please wait, while your request is processed.",
   "Please wait...": "Please wait...",
-  "port": "port",
   "Port": "Port",
   "Port must be a number between 1 and 65535": "Port must be a number between 1 and 65535",
   "Port must be a valid number": "Port must be a valid number",
@@ -563,6 +591,7 @@
   "Recommended": "Recommended",
   "Recovering your account, please wait.": "Recovering your account, please wait.",
   "Recovery": "Recovery",
+  "Redirect URL": "Redirect URL",
   "Refresh to detect extension": "Refresh to detect extension",
   "Registration & Recovery": "Registration & Recovery",
   "Reject": "Reject",
@@ -611,14 +640,18 @@
   "Salt": "Salt",
   "Save": "Save",
   "Save as new credential": "Save as new credential",
+  "Save self registration settings": "Save self registration settings",
   "Save settings": "Save settings",
   "Save Settings Summary": "Save Settings Summary",
+  "Save Single Sign-On configuration": "Save Single Sign-On configuration",
   "Save the data entered as a new credential": "Save the data entered as a new credential",
   "Search": "Search",
   "Search among available credentials": "Search among available credentials",
   "Search passwords": "Search passwords",
   "Search users": "Search users",
   "Search:": "Search:",
+  "Secret": "Secret",
+  "Secret expiry": "Secret expiry",
   "Secret key": "Secret key",
   "Security token": "Security token",
   "See error details": "See error details",
@@ -630,6 +663,7 @@
   "Select all": "Select all",
   "Select resource": "Select resource",
   "Select user": "Select user",
+  "Self Registration": "Self Registration",
   "Send": "Send",
   "Send test email": "Send test email",
   "Sender configuration": "Sender configuration",
@@ -657,12 +691,17 @@
   "Shared with": "Shared with",
   "Shared with me": "Shared with me",
   "Sign in": "Sign in",
+  "Sign in with {{providerName}}": "Sign in with {{providerName}}",
+  "Sign in with my passphrase.": "Sign in with my passphrase.",
+  "Sign in with Single Sign-On.": "Sign in with Single Sign-On.",
   "sign out": "sign out",
   "Sign out": "Sign out",
   "Sign up": "Sign up",
   "Signing in, please wait.": "Signing in, please wait.",
   "Signing in, please wait...": "Signing in, please wait...",
   "Simulate synchronize": "Simulate synchronize",
+  "Single Sign-On": "Single Sign-On",
+  "Single Sign-On provider": "Single Sign-On provider",
   "SMTP host": "SMTP host",
   "SMTP Host is required": "SMTP Host is required",
   "SMTP Host must be a valid string": "SMTP Host must be a valid string",
@@ -682,6 +721,7 @@
   "Sorry, you have not been signed in.": "Sorry, you have not been signed in.",
   "Sorry, your browser is not supported.": "Sorry, your browser is not supported.",
   "Sorry... maybe an administrator can help?": "Sorry... maybe an administrator can help?",
+  "SSO settings have been registered successfully": "SSO settings have been registered successfully",
   "Start": "Start",
   "Start typing a person name": "Start typing a person name",
   "Start typing a user or group name": "Start typing a user or group name",
@@ -711,12 +751,16 @@
   "Terms": "Terms",
   "Test settings": "Test settings",
   "Test settings report": "Test settings report",
+  "Test Single Sign-On configuration": "Test Single Sign-On configuration",
   "The account recovery request does not exist.": "The account recovery request does not exist.",
   "The account recovery review has been saved successfully": "The account recovery review has been saved successfully",
   "The account recovery subscription setting has been updated.": "The account recovery subscription setting has been updated.",
+  "The Application (client) ID is required": "The Application (client) ID is required",
+  "The Application (client) ID must be a valid UUID": "The Application (client) ID must be a valid UUID",
   "The attribute you would like to use for the first part of the email (usually username).": "The attribute you would like to use for the first part of the email (usually username).",
+  "The Azure Active Directory tenant ID, in UUID format.": "The Azure Active Directory tenant ID, in UUID format.",
+  "The Azure AD authentication endpoint. See <1>alternatives</1>.": "The Azure AD authentication endpoint. See <1>alternatives</1>.",
   "The base DN (default naming context) for the domain.": "The base DN (default naming context) for the domain.",
-  "The client identifier should be an integer.": "The client identifier should be an integer.",
   "The comment has been added successfully": "The comment has been added successfully",
   "The comment has been deleted successfully": "The comment has been deleted successfully",
   "The default admin user is the user that will perform the operations for the the directory.": "The default admin user is the user that will perform the operations for the the directory.",
@@ -725,6 +769,8 @@
   "The description content will be encrypted.": "The description content will be encrypted.",
   "The description has been updated successfully": "The description has been updated successfully",
   "The dialog has been closed.": "The dialog has been closed.",
+  "The Directory (tenant) ID is required": "The Directory (tenant) ID is required",
+  "The Directory (tenant) ID must be a valid UUID": "The Directory (tenant) ID must be a valid UUID",
   "The domain name part of the email (@your-domain-name).": "The domain name part of the email (@your-domain-name).",
   "The Duo provider is disabled for all users.": "The Duo provider is disabled for all users.",
   "The Duo provider is enabled for all users. They can setup this provider in their profile and use it as second factor authentication.": "The Duo provider is enabled for all users. They can setup this provider in their profile and use it as second factor authentication.",
@@ -744,6 +790,8 @@
   "The invitation is expired.": "The invitation is expired.",
   "The invite has been resent successfully": "The invite has been resent successfully",
   "The key can't be empty.": "The key can't be empty.",
+  "The Login URL is required": "The Login URL is required",
+  "The Login URL must be a valid URL": "The Login URL must be a valid URL",
   "The multi factor authentication settings for the organization were updated.": "The multi factor authentication settings for the organization were updated.",
   "The new organization recovery key should not be a formerly used organization recovery key.": "The new organization recovery key should not be a formerly used organization recovery key.",
   "The operation failed with the following error:": "The operation failed with the following error:",
@@ -752,6 +800,7 @@
   "The operation was successful.": "The operation was successful.",
   "The organization private recovery key should not be stored in passbolt.": "The organization private recovery key should not be stored in passbolt.",
   "The organization recovery policy has been updated successfully": "The organization recovery policy has been updated successfully",
+  "The passphrase from the SSO kit doesn't match your private key: {{error}}": "The passphrase from the SSO kit doesn't match your private key: {{error}}",
   "The passphrase is invalid.": "The passphrase is invalid.",
   "The passphrase is part of an exposed data breach.": "The passphrase is part of an exposed data breach.",
   "The passphrase is stored on your device and never sent server side.": "The passphrase is stored on your device and never sent server side.",
@@ -769,6 +818,7 @@
   "The password has been removed from favorites": "The password has been removed from favorites",
   "The password has been updated successfully": "The password has been updated successfully",
   "The password is empty.": "The password is empty.",
+  "The password is part of an exposed data breach.": "The password is part of an exposed data breach.",
   "The passwords have been exported successfully": "The passwords have been exported successfully",
   "The permalink has been copied to clipboard": "The permalink has been copied to clipboard",
   "The permissions do not match the destination folder permissions.": "The permissions do not match the destination folder permissions.",
@@ -776,17 +826,25 @@
   "The private key is invalid.": "The private key is invalid.",
   "The private key should not be empty.": "The private key should not be empty.",
   "The private key should not have an expiry date.": "The private key should not have an expiry date.",
+  "The public identifier for the app in Azure in UUID format.": "The public identifier for the app in Azure in UUID format.",
   "The public key has been copied to clipboard": "The public key has been copied to clipboard",
   "The pwnedpasswords service is unavailable, your passphrase might be part of an exposed data breach": "The pwnedpasswords service is unavailable, your passphrase might be part of an exposed data breach",
+  "The pwnedpasswords service is unavailable, your password might be part of an exposed data breach": "The pwnedpasswords service is unavailable, your password might be part of an exposed data breach",
+  "The redirection URL has been copied to the clipboard.": "The redirection URL has been copied to the clipboard.",
   "The request is expired.": "The request is expired.",
-  "The salt should be between 40 and 128 characters in length.": "The salt should be between 40 and 128 characters in length.",
+  "The Secret expiry is required": "The Secret expiry is required",
   "The secret has been copied to clipboard": "The secret has been copied to clipboard",
+  "The Secret is required": "The Secret is required",
   "The secret plaintext is empty.": "The secret plaintext is empty.",
   "The security token code should be 3 characters long.": "The security token code should be 3 characters long.",
   "The security token code should not be empty.": "The security token code should not be empty.",
   "The security token has been updated successfully": "The security token has been updated successfully",
+  "The self registration settings for the organization were updated.": "The self registration settings for the organization were updated.",
   "The settings displayed in the form below are the one stored in your database and have precedence over others.": "The settings displayed in the form below are the one stored in your database and have precedence over others.",
+  "The Single Sign-On provider must be a supported provider.": "The Single Sign-On provider must be a supported provider.",
   "The SMTP settings have been saved successfully": "The SMTP settings have been saved successfully",
+  "The SSO kit is outdated and can't be used to decrypt your passphrase: {{error}}": "The SSO kit is outdated and can't be used to decrypt your passphrase: {{error}}",
+  "The SSO settings has been deleted successfully": "The SSO settings has been deleted successfully",
   "The subscription key has been updated successfully.": "The subscription key has been updated successfully.",
   "The subscription key is invalid.": "The subscription key is invalid.",
   "The tag has been deleted successfully": "The tag has been deleted successfully",
@@ -799,6 +857,7 @@
   "The Time-based One Time Password provider is enabled for all users. They can setup this provider in their profile and use it as second factor authentication.": "The Time-based One Time Password provider is enabled for all users. They can setup this provider in their profile and use it as second factor authentication.",
   "The transfer was cancelled because the other client returned an error.": "The transfer was cancelled because the other client returned an error.",
   "The uri has been copied to clipboard": "The uri has been copied to clipboard",
+  "The URL to provide to Azure when registering the application.": "The URL to provide to Azure when registering the application.",
   "The user directory settings for the organization were updated.": "The user directory settings for the organization were updated.",
   "The user has been added successfully": "The user has been added successfully",
   "The user has been deleted successfully": "The user has been deleted successfully",
@@ -821,21 +880,20 @@
   "This action can’t be undone. All the data associated with this user will be permanently deleted.": "This action can’t be undone. All the data associated with this user will be permanently deleted.",
   "This action can’t be undone. Other users may lose access.": "This action can’t be undone. Other users may lose access.",
   "This action can’t be undone. Users in this group may lose access to the content shared with it.": "This action can’t be undone. Users in this group may lose access to the content shared with it.",
+  "This action cannot be undone. All the data associated with SSO will be permanently deleted.": "This action cannot be undone. All the data associated with SSO will be permanently deleted.",
+  "This domain already exist": "This domain already exist",
   "This email is not associated with any approved users on this domain.": "This email is not associated with any approved users on this domain.",
   "This group is the sole owner of some content. You need to transfer the ownership to others to continue.": "This group is the sole owner of some content. You need to transfer the ownership to others to continue.",
-  "This is not a valid hostname.": "This is not a valid hostname.",
-  "This is not a valid integration key.": "This is not a valid integration key.",
   "This is not a valid passphrase.": "This is not a valid passphrase.",
-  "This is not a valid secret key.": "This is not a valid secret key.",
   "This is the email address users will see in their mail box when passbolt sends a notification.<1></1>It&apos;s a good practice to provide a working email address that users can reply to.": "This is the email address users will see in their mail box when passbolt sends a notification.<1></1>It&apos;s a good practice to provide a working email address that users can reply to.",
   "this is the maximum size for this field, make sure your data was not truncated": "this is the maximum size for this field, make sure your data was not truncated.",
   "This is the name users will see in their mailbox when passbolt sends a notification.": "This is the name users will see in their mailbox when passbolt sends a notification.",
   "This passphrase is the only passphrase you will need to remember from now on, choose wisely!": "This passphrase is the only passphrase you will need to remember from now on, choose wisely!",
-  "This secret key is not valid.": "This secret key is not valid.",
   "This security token will be displayed when your passphrase is requested, so you can quickly verify the form is coming from passbolt.": "This security token will be displayed when your passphrase is requested, so you can quickly verify the form is coming from passbolt.",
   "This security token will be displayed when your passphrase is requested, so you can verify quickly the form is coming from passbolt.": "This security token will be displayed when your passphrase is requested, so you can verify quickly the form is coming from passbolt.",
   "This shared tag can't be added, you are not the owner": "This shared tag can't be added, you are not the owner",
   "This shared tag can't be deleted, you are not the owner": "This shared tag can't be deleted, you are not the owner",
+  "This should be a valid domain": "This should be a valid domain",
   "This tag can't be added, the length cannot exceed {{tagMaxLength}}": "This tag can't be added, the length cannot exceed {{tagMaxLength}}",
   "This tag is already present": "This tag is already present",
   "This user is an administrator": "This user is an administrator",
@@ -882,6 +940,8 @@
   "User object class": "User object class",
   "User path": "User path",
   "User path is used in addition to base DN while searching users.": "User path is used in addition to base DN while searching users.",
+  "User self registration enables users with an email from a whitelisted domain to create their passbolt account without prior admin invitation.": "User self registration enables users with an email from a whitelisted domain to create their passbolt account without prior admin invitation.",
+  "User self registration is disabled.": "User self registration is disabled.",
   "Username": "Username",
   "Username / Email": "Username / Email",
   "Username & password": "Username & password",
@@ -892,6 +952,7 @@
   "Users Directory": "Users Directory",
   "Users limit:": "Users limit:",
   "Users parent group": "Users parent group",
+  "Users will not be able to self register anymore.": "Users will not be able to self register anymore.",
   "Valid from:": "Valid from:",
   "varies": "varies",
   "Verify": "Verify",
@@ -904,7 +965,6 @@
   "Want to contribute?": "Want to contribute?",
   "Warning, Don&apos;t forget to add an organization recovery key.": "Warning, Don&apos;t forget to add an organization recovery key.",
   "Warning, Don&apos;t forget to save your settings to apply your modification.": "Warning, Don&apos;t forget to save your settings to apply your modification.",
-  "Warning, Please review carefully this configuration as it will not be trivial to change this later.": "Warning, Please review carefully this configuration as it will not be trivial to change this later.",
   "Warning, we encourage you to generate your OpenPGP Organization Recovery Key separately. Make sure you keep a backup in a safe place.": "Warning, we encourage you to generate your OpenPGP Organization Recovery Key separately. Make sure you keep a backup in a safe place.",
   "Warning:": "Warning:",
   "Warning: If users lose their private key and passphrase they will not be able to recover their account.": "Warning: If users lose their private key and passphrase they will not be able to recover their account.",
@@ -917,6 +977,7 @@
   "Welcome to the mobile app setup": "Welcome to the mobile app setup",
   "What if I forgot my passphrase?": "What if I forgot my passphrase?",
   "What is the role of the passphrase?": "What is the role of the passphrase?",
+  "What is user self registration?": "What is user self registration?",
   "When a comment is posted on a password, notify the users who have access to this password.": "When a comment is posted on a password, notify the users who have access to this password.",
   "When a folder is created, notify its creator.": "When a folder is created, notify its creator.",
   "When a folder is deleted, notify the users who had access to it.": "When a folder is deleted, notify the users who had access to it.",
@@ -932,11 +993,11 @@
   "When a user completed a setup, notify all the administrators.": "When a user completed a setup, notify all the administrators.",
   "When an account recovery is approved, notify the user.": "When an account recovery is approved, notify the user.",
   "When an account recovery is rejected, notify the user.": "When an account recovery is rejected, notify the user.",
-  "When an account recovery is requested, notify the administrators.": "When an account recovery is requested, notify the administrators.",
+  "When an account recovery is requested, notify all the administrators.": "When an account recovery is requested, notify all the administrators.",
   "When an account recovery is requested, notify the user.": "When an account recovery is requested, notify the user.",
-  "When an account recovery policy is updated, notify the administrators.": "When an account recovery policy is updated, notify the administrators.",
+  "When an account recovery policy is updated, notify all the administrators.": "When an account recovery policy is updated, notify all the administrators.",
   "When an administrator answered to an account recovery request, notify all the administrators.": "When an administrator answered to an account recovery request, notify all the administrators.",
-  "When an administrator answered to an account recovery request, notify the administrator.": "When an administrator answered to an account recovery request, notify the administrator.",
+  "When an administrator answered to an account recovery request, notify the administrator at the origin of the action.": "When an administrator answered to an account recovery request, notify the administrator at the origin of the action.",
   "When members of a group change, notify the group manager(s).": "When members of a group change, notify the group manager(s).",
   "When new users are invited to passbolt, notify them.": "When new users are invited to passbolt, notify them.",
   "When user roles change in a group, notify the corresponding users.": "When user roles change in a group, notify the corresponding users.",
@@ -974,11 +1035,14 @@
   "You cannot delete this user!": "You cannot delete this user!",
   "You do not own any passwords yet. It does feel a bit empty here, create your first password.": "You do not own any passwords yet. It does feel a bit empty here, create your first password.",
   "You need to click save for the changes to take place.": "You need to click save for the changes to take place.",
+  "You need to enter your current passphrase.": "You need to enter your current passphrase.",
   "You need to finalize the account recovery process with the same computer you used for the account recovery request.": "You need to finalize the account recovery process with the same computer you used for the account recovery request.",
   "You need use the same computer and browser to finalize the process.": "You need use the same computer and browser to finalize the process.",
   "You need your passphrase to continue.": "You need your passphrase to continue.",
   "You seem to have Email Notification Settings defined in your passbolt.php (or via environment variables).": "You seem to have Email Notification Settings defined in your passbolt.php (or via environment variables).",
+  "You should inform your users not to store personal passwords.": "You should inform your users not to store personal passwords.",
   "You should keep it offline in a safe place.": "You should keep it offline in a safe place.",
+  "You susccessfully signed in with your {{providerName}} account. You can safely save your configuration.": "You susccessfully signed in with your {{providerName}} account. You can safely save your configuration.",
   "You will be able to save it after submitting": "You will be able to save it after submitting",
   "you@organization.com": "you@organization.com",
   "Your language is missing or you discovered an error in the translation, help us to improve passbolt.": "Your language is missing or you discovered an error in the translation, help us to improve passbolt.",

package/src/react-extension/ApiApp.js

@@ -34,9 +34,13 @@ import ApiAppContextProvider from "./contexts/ApiAppContext";
 import TranslationProvider from "./components/Common/Internationalisation/TranslationProvider";
 import AppContext from "./contexts/AppContext";
 import AccountRecoveryUserContextProvider from "./contexts/AccountRecoveryUserContext";
-import ApiAppAccountRecoveryUserService from "../shared/services/accountRecovery/ApiAppAccountRecoveryUserService";
+import ApiAppAccountRecoveryUserService from "../shared/services/api/accountRecovery/ApiAppAccountRecoveryUserService";
 import AdminSmtpSettingsContextProvider from "./contexts/AdminSmtpSettingsContext";
 import AdminEmailNotificationContextProvider from "./contexts/Administration/AdministrationEmailNotification/AdministrationEmailNotificationContext";
+import AdminMfaContextProvider from "./contexts/Administration/AdministrationMfa/AdministrationMfaContext";
+import AdminUserDirectoryContextProvider from './contexts/Administration/AdministrationUserDirectory/AdministrationUserDirectoryContext';
+import AdminInternationalizationContextProvider from "./contexts/Administration/AdministrationInternationalizationContext/AdministrationInternationalizationContext";
+import AdminSelfRegistrationContextProvider from "./contexts/Administration/AdministrationSelfRegistration/AdministrationSelfRegistrationContext";
 
 /**
  * The passbolt application served by the API.
@@ -79,12 +83,20 @@ class ApiApp extends Component {
                               <Route path="/app/administration">
                                 <AdministrationWorkspaceContextProvider>
                                   <AdminSmtpSettingsContextProvider>
-                                    <ManageDialogs/>
                                     <ManageContextualMenu/>
                                     <ManageAnnouncements/>
-                                    <AdminEmailNotificationContextProvider>
-                                      <AdministrationWorkspace/>
-                                    </AdminEmailNotificationContextProvider>
+                                    <AdminUserDirectoryContextProvider>
+                                      <AdminSelfRegistrationContextProvider>
+                                        <ManageDialogs/>
+                                        <AdminMfaContextProvider>
+                                          <AdminEmailNotificationContextProvider>
+                                            <AdminInternationalizationContextProvider>
+                                              <AdministrationWorkspace/>
+                                            </AdminInternationalizationContextProvider>
+                                          </AdminEmailNotificationContextProvider>
+                                        </AdminMfaContextProvider>
+                                      </AdminSelfRegistrationContextProvider>
+                                    </AdminUserDirectoryContextProvider>
                                   </AdminSmtpSettingsContextProvider>
                                 </AdministrationWorkspaceContextProvider>
                               </Route>

package/src/react-extension/ApiFeedback.entry.js

@@ -0,0 +1,24 @@
+/**
+ * Passbolt ~ Open source password manager for teams
+ * Copyright (c) 2020 Passbolt SA (https://www.passbolt.com)
+ *
+ * Licensed under GNU Affero General Public License version 3 of the or any later version.
+ * For full copyright and license information, please see the LICENSE.txt
+ * Redistributions of files must retain the above copyright notice.
+ *
+ * @copyright     Copyright (c) 2020 Passbolt SA (https://www.passbolt.com)
+ * @license       https://opensource.org/licenses/AGPL-3.0 AGPL License
+ * @link          https://www.passbolt.com Passbolt(tm)
+ */
+import React from "react";
+import ReactDOM from "react-dom";
+import ApiError from "./components/Common/Error/ApiError/ApiError";
+
+/**
+ * Entry point - Passbolt application served by the API.
+ * This entry point will be used to compile the production code see webpack-api.config.js
+ */
+
+const appDomElement = document.createElement("div");
+document.body.appendChild(appDomElement);
+ReactDOM.render(<ApiError/>, appDomElement);

package/src/react-extension/ExtApp.js

@@ -55,12 +55,14 @@ import HandleErrorEvents from "./components/Common/Error/HandleErrorEvents/Handl
 import DisplayResourcesWorkspace from "./components/Resource/DisplayResourcesWorkspace/DisplayResourcesWorkspace";
 import DragContextProvider from "./contexts/DragContext";
 import AccountRecoveryUserContextProvider from "./contexts/AccountRecoveryUserContext";
-import ExtAppAccountRecoveryUserService from "../shared/services/accountRecovery/ExtAppAccountRecoveryUserService";
+import ExtAppAccountRecoveryUserService from "../shared/services/api/accountRecovery/ExtAppAccountRecoveryUserService";
 import HandleAccountRecoveryStatusCheck from "./components/AccountRecovery/HandleAccountRecoveryStatusCheck/HandleAccountRecoveryStatusCheck";
 import WorkflowContextProvider from "./contexts/WorkflowContext";
 import ManageWorkflows from "./components/Common/Workflow/ManageWorkflows/ManageWorkflows";
 import AdminAccountRecoveryContextProvider from "./contexts/AdminAccountRecoveryContext";
 import HandleApplicationFirstLoadRoute from "./components/Common/Route/HandleApplicationFirstLoadRoute";
+import AdminSubscriptionContextProvider from "./contexts/Administration/AdministrationSubscription/AdministrationSubscription";
+import AdminSsoContextProvider from "./contexts/AdminSsoContext";
 
 /**
  * The passbolt application served by the browser extension.
@@ -186,16 +188,21 @@ class ExtApp extends Component {
                                       </div>
                                     </UserSettingsContextProvider>
                                   </Route>
-                                  {/* Subscription and Account Recovery settings */}
+                                  {/* SSO, Subscription and Account Recovery settings */}
                                   <Route exact path={[
                                     "/app/administration/subscription",
                                     "/app/administration/account-recovery",
+                                    "/app/administration/sso",
                                   ]}>
                                     <AdministrationWorkspaceContextProvider>
                                       <AdminAccountRecoveryContextProvider>
-                                        <ManageDialogs/>
-                                        <ManageWorkflows/>
-                                        <AdministrationWorkspace/>
+                                        <AdminSubscriptionContextProvider>
+                                          <AdminSsoContextProvider>
+                                            <ManageDialogs/>
+                                            <ManageWorkflows/>
+                                            <AdministrationWorkspace/>
+                                          </AdminSsoContextProvider>
+                                        </AdminSubscriptionContextProvider>
                                       </AdminAccountRecoveryContextProvider>
                                     </AdministrationWorkspaceContextProvider>
                                   </Route>