Skip to content

docs: access check config docs rework#1477

Merged
edibotopic merged 3 commits intomainfrom
docs-access-check-config-docs-rework
Apr 21, 2026
Merged

docs: access check config docs rework#1477
edibotopic merged 3 commits intomainfrom
docs-access-check-config-docs-rework

Conversation

@edibotopic
Copy link
Copy Markdown
Contributor

@edibotopic edibotopic commented Apr 20, 2026

Updates section in configuration guide to reflect recent naming and description changes for config option force_access_check_with_provider.

  • Use terms from the config option, like "check", "access" and "force",
    to map more clearly between the wording of the config option and the
    text in this section
  • Explicitly mention what is being checked from a user perspective, i.e., whether
    they have permission to access the system according to the IdP
  • Add a brief explanation of how the check works
  • Link to section on this check in the Security Overview

Closes #1340

UDENG-9749

@edibotopic
Copy link
Copy Markdown
Contributor Author

Linkcheck failure will be fixed by #1478

@edibotopic edibotopic marked this pull request as ready for review April 20, 2026 10:41
* Use terms from the config option, like "check", "access" and "force",
to map more clearly between the wording of the config option and the
text in this section
* Explicitly mention what is being checked from a user perspective (do
they have permission to access, according to the IdP)
this section provides further context for why an admin might enable this
check, from a security perspective.
@edibotopic edibotopic force-pushed the docs-access-check-config-docs-rework branch from 3d4205c to a08ba08 Compare April 20, 2026 12:06
@nooreldeenmansour
Copy link
Copy Markdown
Member

This PR will be closing #1340 ? If so, please link it, so we don't forget about it

Also, since we are now improving the docs around this property, shall we consider this issue too? #933

@edibotopic
Copy link
Copy Markdown
Contributor Author

This PR will be closing #1340 ? If so, please link it, so we don't forget about it

Also, since we are now improving the docs around this property, shall we consider this issue too? #933

Thanks @nooreldeenmansour --- I've linked to #1340 now.

We should also look at #933 separately, yes, but it will require further discussion and might need to wait until we're back from Madrid.

@edibotopic edibotopic merged commit d708f32 into main Apr 21, 2026
6 checks passed
@edibotopic edibotopic deleted the docs-access-check-config-docs-rework branch April 21, 2026 09:37
## Force remote authentication with the identity provider
## Force remote access check with the identity provider

By default, remote authentication with the identity provider only happens if
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't we also use the new (and better) terminology here?

Suggested change
By default, remote authentication with the identity provider only happens if
By default, a remote access check with the identity provider only happens if

Copy link
Copy Markdown
Member

@nooreldeenmansour nooreldeenmansour Apr 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed, I can add this to #1467

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#1467 is completely unrelated, let's do it in a separate PR please. I'd like @edibotopic's opinion on the change first though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Improve docs on force_provider_authentication

3 participants