Skip to content

Commit 4a85786

Browse files
GitHub Actionsjmagak
authored andcommitted
Update the enabling authentication with rhbk
1 parent 289c33d commit 4a85786

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

modules/authentication/proc-enabling-authentication-with-rhbk.adoc

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,7 @@ auth:
4545
metadataUrl: ${AUTH_OIDC_METADATA_URL}
4646
clientId: ${AUTH_OIDC_CLIENT_ID}
4747
clientSecret: ${AUTH_OIDC_CLIENT_SECRET}
48+
prompt: auto
4849
signInPage: oidc
4950
----
5051

@@ -57,6 +58,13 @@ To configure the OIDC provider with your secrets.
5758
`sigInPage: oidc`::
5859
To enable the OIDC provider as default sign-in provider.
5960

61+
`prompt: auto`::
62+
To allow the identity provider to automatically determine whether to prompt for credentials or bypass the login redirect if an active {rhsso} session exists.
63+
64+
[NOTE]
65+
====
66+
If `prompt: auto` is not set, the identity provider defaults to `prompt: none`, which assumes that you are already logged in and rejects sign-in requests without an active session.
67+
====
6068

6169
Optional: Consider adding the following optional fields:
6270

@@ -78,6 +86,7 @@ auth:
7886
metadataUrl: ${AUTH_OIDC_METADATA_URL}
7987
clientId: ${AUTH_OIDC_CLIENT_ID}
8088
clientSecret: ${AUTH_OIDC_CLIENT_SECRET}
89+
prompt: auto
8190
signInPage: oidc
8291
dangerouslyAllowSignInWithoutUserInCatalog: true
8392
----
@@ -188,4 +197,3 @@ If multiple valid refresh tokens are issued due to frequent refresh token reques
188197
. Go to the {product-short} login page.
189198
. Your {product-short} sign-in page displays *Sign in using OIDC* and the Guest user sign-in is disabled.
190199
. Log in with OIDC by using the saved **Username** and **Password** values.
191-

0 commit comments

Comments
 (0)