Gerald Barker
fc723af0fe
Add option to OIDC connecter to override email_verified to true
7 years ago
Takashi Okamoto
ac290f77aa
Fix typo.
7 years ago
Mark Sagi-Kazar
c48cb36e8f
Fix typo
7 years ago
Nandor Kracser
6c71b330a8
production users: add Banzai Cloud
7 years ago
James Nord
9840fccdbb
rename useLoginAsId -> useLoginAsID
7 years ago
James Nord
1911b52c6b
Add documentation for the new GitHub useLoginAsId option
7 years ago
Stephan Renatus
4abf3b2102
docs: mirror resolution of #1281 in dev doc
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Takashi Okamoto
337bbe5f09
fix typos.
7 years ago
Takashi Okamoto
1b7b3515d7
Add Active Directory instruction.
7 years ago
Takashi Okamoto
fbdb55aba9
Add doc for kubelogin and Active Directory ingtegration sample.
7 years ago
Joshua M. Dotson
46296ab9d0
Documentation/dev-dependencies.md: Update for Go modules
7 years ago
Owen Tuz
9ea2ade208
LDAP docs - remove extra wording re DN
7 years ago
Owen Tuz
e603a5e631
LDAP connector - Document that 'DN' must be in capitals
7 years ago
Owen Tuz
9b5122568a
Kubernetes docs: replace absolute link with relative
7 years ago
Owen Tuz
72c9cf43a9
Fix comment in LDAP query documentation
7 years ago
Owen Tuz
45eb9b279b
Kubernetes docs: wording nitpicks
7 years ago
Owen Tuz
58093dbb29
Kubernetes example: Add RBAC resources and serviceAccount to YAML manifest, remove some references to deprecated TPR approach
7 years ago
Owen Tuz
e028b79c97
Kubernetes docs: clarify steps around use/creation of TLS assets.
7 years ago
Stephan Renatus
58b546a5be
dev-integration-test: add etcd notes
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Stephan Renatus
cbcb1f61f3
dev-integration-tests: update database steps (just use docker)
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
7 years ago
Josh Winters
bb11a1ebee
github: add 'both' team name field option
...
this will result in both the team name *and* the team slug being
returned for each team, allowing a bit more flexibility in auth
validation.
Signed-off-by: Topher Bullock <tbullock@pivotal.io>
Signed-off-by: Alex Suraci <suraci.alex@gmail.com>
7 years ago
gypsydiver
f21e6a0f00
gypsydiver/1347-pr-gitlab-groups
7 years ago
Alexander Matyushentsev
7bd084bc07
Issue #1102 - Add config to explicitly enable loading all github groups
7 years ago
Alex Suraci
7c63be4104
remove incomplete mysql and cockroachdb support
7 years ago
Alexander Matyushentsev
e5ebcf518a
Update github connector documentation
7 years ago
Tiago Matias
44e988fb41
point users to storage/RBAC docs
7 years ago
Danny Sauer
b9b21260bc
Add mention of `scopes` parameter in OIDC doc
8 years ago
Ed Tan
6ffc8fcd8d
Rename bitbucket to bitbucketcloud
8 years ago
Ed Tan
d26e23c16f
Make suggested code changes
8 years ago
Ed Tan
8c75d85b60
Add Bitbucket connector
8 years ago
Taras Burko
bf39130bab
Configurable team name field for GitHub connector
8 years ago
Stephan Renatus
1309c1f037
dev-releases.md, Makefile: update release process
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
8 years ago
Stephan Renatus
b9f6594bf0
*: github.com/coreos/dex -> github.com/dexidp/dex
...
Signed-off-by: Stephan Renatus <srenatus@chef.io>
8 years ago
Anian Z
5454a4729f
fix default baseURL for gitlab connector
8 years ago
Ahmed ElRefaey
32e9570116
Fix a breoken link in the oidc readme
...
Fixed a broken link to An overview of OpenID Connect
8 years ago
Matthias Klan
481f1276a8
Update using-dex.md
...
fix wrong port from example
8 years ago
Simon Knott
822a10cede
Add missing word
8 years ago
Vy-Shane Xie
b03c85e56e
Add new federated:id scope that causes Dex to add a federated_claims claim containing the connector_id and user_id to the ID token
8 years ago
Eric Chiang
460f48320e
Documentation: restructure connector docs to a single folder
8 years ago
Eric Chiang
0811d1a07a
document limitations in the OpenID Connect connector
8 years ago
Wyatt Alt
e7d57bb31b
Correct "Verifier" method name in using-dex doc
...
Change provider.NewVerifier to provider.Verifier per the godocs:
https://godoc.org/github.com/coreos/go-oidc#Provider.Verifier
8 years ago
Pavel Borzenkov
47df6ea2ff
connector/microsoft: add support for groups
...
Microsoft connector now provides support for 'groups' claim in case
'tenant' is configured in Dex config for the connector. It's possible to
deny user authentication if the user is not a member of at least one
configured groups.
Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>
8 years ago
Pavel Borzenkov
6193bf5566
connector: implement Microsoft connector
...
connector/microsoft implements authorization strategy via Microsoft's
OAuth2 endpoint + Graph API. It allows to choose what kind of tenants
are allowed to authenticate in Dex via Microsoft:
* common - both personal and business/school accounts
* organizations - only business/school accounts
* consumers - only personal accounts
* <tenant uuid> - only account of specific tenant
Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>
8 years ago
Stephan Renatus
b09a13458f
password connectors: allow overriding the username attribute (password prompt)
...
This allows users of the LDAP connector to give users of Dex' login
prompt an idea of what they should enter for a username.
Before, irregardless of how the LDAP connector was set up, the prompt
was
Username
[_________________]
Password
[_________________]
Now, this is configurable, and can be used to say "MyCorp SSO Login" if
that's what it is.
If it's not configured, it will default to "Username".
For the passwordDB connector (local users), it is set to "Email
Address", since this is what it uses.
Signed-off-by: Stephan Renatus <srenatus@chef.io>
8 years ago
Daniel Dao
a2188bebf1
add documentation for etcd storage
...
This adds references to etcd storage, including:
- only supports etcd v3
- list of options and their meanings when connecting to etcd cluster
8 years ago
Eric Chiang
3d2d92b31b
*: run kubernetes tests in travis
8 years ago
Pavel Borzenkov
d5a9712aae
Documentation: add LinkedIn connector documentation
...
Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>
9 years ago
Michael Stapelberg
4931f30a80
authproxy.md: strip X-Remote-User
...
follow-up for https://github.com/coreos/dex/pull/1100
9 years ago
Eric Chiang
d099145921
authproxy: update docs and set a userID
9 years ago
Michael Stapelberg
a41d93db4a
Implement the “authproxy” connector (for Apache2 mod_auth etc.)
9 years ago