@@ -22,9 +22,9 @@ domain name for the OIDC token callback; use
22
22
` https://coder.my-company.com/oidc/callback ` .
23
23
24
24
Once you've registered a Coder application with your OIDC provider, you'll need
25
- to return to Coder and complete the setup process. Under ** Admin** > ** Manage ** >
26
- ** Authentication** , ensure that you've selected ** OpenID Connect** as the
27
- authentication type. Then, provide the following parameters:
25
+ to return to Coder and complete the setup process. Under ** Admin** >
26
+ ** Manage ** > ** Authentication** , ensure that you've selected ** OpenID Connect**
27
+ as the authentication type. Then, provide the following parameters:
28
28
29
29
- ** Client ID** : The client ID for the Coder application you registered with the
30
30
OIDC provider
43
43
tokens from ` https://<yourDomain>/api/v0/users/me/oidc-access-token `
44
44
- ** Additional Scopes:** Specify any scopes (beyond the default) that you would
45
45
like Coder to request from the authentication provider. By default, Coder
46
- requests the scopes ` openid ` , ` email ` , and ` profile ` . Consult your
47
- authentication provider's documentation for information on which scopes they
48
- support.
46
+ requests the scopes ` openid ` , ` email ` , and ` profile ` . Consult your
47
+ authentication provider's documentation for information on which scopes they
48
+ support.
49
49
- ** Disable built-in authentication:** Choose whether Coder removes the ability
50
50
to log in with an email/password option when you've enabled OIDC
51
51
authentication
@@ -62,9 +62,5 @@ To do so, navigate to **Manage** > **Admin** > **Authentication**. Then, toggle
62
62
** Disable built-in authentication** to ** On** and click ** Save preferences** .
63
63
64
64
[ Site managers] ( users/user-roles#site-manager-permissions ) can still use
65
- built-in authentication. To view this option on the login page, add the
66
- following query parameter to the URL you use to access your Coder deployment:
67
-
68
- ``` text
69
- /login?showAllAuthenticationTypes=1
70
- ```
65
+ built-in authentication. The ** Admin Login** option will be visible on the login
66
+ page if built-in authentication is disabled.
0 commit comments