Updated SSO Authentication (markdown)

Eugene 2022-08-09 00:21:00 +02:00
parent c2e9c4e77a
commit e97dfe6f35

@ -114,13 +114,14 @@ To link a user to SSO add a new `credentials` entry:
credentials:
...
+ - type: sso
+ provider: azure
+ email: c.wilde@acme.in
+ require:
+ http: [sso]
+ ssh: [web]
```
Here, we've also set SSO to be the only required login credential for HTTP auth, and have set SSH to use out-of-band web authentication.
Here, we've also set SSO to be the only required login credential for HTTP auth, and have set SSH to use out-of-band web authentication. You can omit the `provider` key if there's only one provider, or if you don't care which provider confirms the user's e-mail.
> `web` (OOB web authentication) means that Warpgate will send a login link to the SSH client and will wait for the user to authenticate themselves in a browser. The auth requirements will be the same as set for the `http` protocol.