RC: Passwordless authentication for public endpoints blocked

Author: cmilesb

content/operate/rc/databases/view-edit-database.md

@@ -98,7 +98,7 @@ The **Security** section helps you control access to your database.
 |Setting name| Description                                                                                                                                                                    |
 |:-----------|:-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
 | **Default user** | When enabled, permits access using a simple password                                                                                                                           |
-| **Default user password** | Password for default user. A default password is assigned to the database on creation and may be updated.                                                                      |
+| **Default user password** | Password for default user. A default password is assigned to the database on creation and may be updated. If you [block the public endpoint]({{< relref "/operate/rc/security/database-security/block-public-endpoints" >}}), you can also turn on passwordless authentication for the default user here.  |
 | **CIDR allow list** | [Allow list]({{< relref "/operate/rc/security/cidr-whitelist.md" >}}) of IP addresses/security groups permitted to access the database. (_Paid plans only_)                    |
 | **Transport layer security (TLS)** | Enables [transport layer security]({{< relref "/operate/rc/security/database-security/tls-ssl.md" >}}) (TLS) encryption for database access. (_Pro plans only_)  |
 

content/operate/rc/security/access-control/data-access-control/default-user.md

@@ -23,6 +23,8 @@ Use the copy button to copy the password to the clipboard:
 
 You'll need to use this password whenever you connect to your database using a Redis client. See [Connect to a database]({{< relref "/operate/rc/databases/connect" >}}) for more info.
 
+If you have [blocked the public endpoint]({{< relref "/operate/rc/security/database-security/block-public-endpoints" >}}) for your Redis Cloud Pro subscription, you can also turn on passwordless authentication for the default user. See [Block public endpoints]({{< relref "/operate/rc/security/database-security/block-public-endpoints#turn-on-passwordless-authentication-for-the-default-user" >}}) for more info.
+
 See your [Redis client's documentation]({{< relref "/develop/clients" >}}) to learn how to provide your password when connecting.
 
 ## Change password

content/operate/rc/security/database-security/block-public-endpoints.md

@@ -49,6 +49,17 @@ To block the public endpoints of an existing Pro subscription:
 
 After your changes are saved, any incoming connections to the public endpoint of your database will be rejected, and only connections through a private connectivity method will be allowed.
 
+## Turn on passwordless authentication for the default user
+
+If you have blocked the public endpoint for your Redis Cloud Pro subscription, you can turn on passwordless authentication for the [default user]({{< relref "/operate/rc/security/access-control/data-access-control/default-user" >}}) for any database in that subscription.
+
+To turn on passwordless authentication:
+
+1. From the database **Configuration** tab, select **Edit**.
+1. In the **Security** section, select **Use passwordless auth** to turn on passwordless authentication.
+    {{<image filename="images/rc/database-configuration-security-passwordless.png" alt="Turn on passwordless authentication for the default user." >}}
+1. Select **Save database** to save your changes.
+
 ## Private connectivity methods
 
 Redis Cloud supports the following private connectivity options: