# Bug OP-9005 - Expired enterprise edition locking users out of OpenProject and all enterprise features

Project: OpenProject
Status: closed
URL: https://community.openproject.org/work_packages/OP-9005

## Open points

_No work packages_

## Details

| Attribute | Value |
| --- | --- |
| Date |  |
| Priority | High |
| Module |  |
| Target versions | 11.4.0 |
| Observed in versions |  |
| Sprint | 11.4.0 |
| Backlog bucket |  |
| Bug found in version (deprecated) |  |
| Found in mobile app version |  |
| Follow-up feedback e-mail |  |
| Requires doc change | No |
| Accessibility | No |
| Pull preview |  |
| List |  |
| Labels |  |

## People

| Attribute | Value |
| --- | --- |
| Assignee |  |
| Accountable |  |
| Product manager |  |
| Developers |  |
| Designer |  |
| Ordered by |  |
| Signed off by |  |
| Interest by |  |

## Planning

| Attribute | Value |
| --- | --- |
| Relevance |  |

## Costs

| Attribute | Value |
| --- | --- |
| Votes |  |
| Work |  |
| Labor costs |  |

## Description

### **Environment**:

Your OpenProject Version: 11.3

### **Steps to reproduce:**

1.  Activate Enterprise Edition
2.  Setup OpenID Connect provider (e.g. Google)
3.  Use that provider to login with all users
4.  Update EE token with expired one
5.  Log out
6.  Be locked out, since OpenID Connect providers are now disabled

### **Actual Behavior**

Users can't login in anymore, say, to **update the enterprise token**.

### **Expected Behavior**

Users should still be able to login, at least for a certain amount of time after the token has expired.

## Implications

Being locked out of OpenProject is merely the worst of the consequences. But at the same time, this also **disables all Enterprise features** in general. So even if not logged out it may render OpenProject unusable for the intended purposes.