docs: access check config docs rework#1477
Conversation
|
Linkcheck failure will be fixed by #1478 |
* Use terms from the config option, like "check", "access" and "force", to map more clearly between the wording of the config option and the text in this section * Explicitly mention what is being checked from a user perspective (do they have permission to access, according to the IdP)
this section provides further context for why an admin might enable this check, from a security perspective.
edibotopic
force-pushed
the
docs-access-check-config-docs-rework
branch
from
3d4205c to
a08ba08
Compare
Thanks @nooreldeenmansour --- I've linked to #1340 now. We should also look at #933 separately, yes, but it will require further discussion and might need to wait until we're back from Madrid. |
| ## Force remote authentication with the identity provider | ||
| ## Force remote access check with the identity provider | ||
|
|
||
| By default, remote authentication with the identity provider only happens if |
There was a problem hiding this comment.
Shouldn't we also use the new (and better) terminology here?
| By default, remote authentication with the identity provider only happens if | |
| By default, a remote access check with the identity provider only happens if |
There was a problem hiding this comment.
#1467 is completely unrelated, let's do it in a separate PR please. I'd like @edibotopic's opinion on the change first though.
There was a problem hiding this comment.
We could make this change. I left it because I didn't think it was necessarily incorrect, just not optimal for use as the config option's name and in the accompanying description.
On reflection though, it is always safer to be consistent. @nooreldeenmansour --- if you want to make the change I can approve.
In future, I think that it could be useful in the docs to have some kind of standalone explanation page that gives a technical overview of what happens during login and the different scenarios involved, because currently the explanations are inter-mingled with the configuration guide. It's good to have a sprinkling of context in there, but some topics might deserve a dedicated treatment.
3 participants
Updates section in configuration guide to reflect recent naming and description changes for config option
force_access_check_with_provider.to map more clearly between the wording of the config option and the
text in this section
they have permission to access the system according to the IdP
Closes #1340
UDENG-9749