Skip to content

Commit 634a9f7

Browse files
committed
more changes as per feedback comments
1 parent 965d162 commit 634a9f7

1 file changed

Lines changed: 5 additions & 2 deletions

File tree

  • content/en/docs/marketplace/platform-supported-content/modules

content/en/docs/marketplace/platform-supported-content/modules/oidc.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -239,10 +239,13 @@ Ensure that you have allocated the following user roles to the OIDC module and U
239239

240240
If a single Identity Provider (IdP) is configured in the OIDC SSO module, end users can be authenticated via the URL `https://<your-app-url>/oauth/v2/login`. When accessing the URL, users are automatically redirected to the configured IdP for authentication.
241241

242-
If multiple IdPs are configured in the OIDC module, end users can access the same URL (`<your-app-url>/oauth/v2/login`) to initiate authentication. In this case, they will first be redirected to an IdP selection page, where they can choose the IdP they want to use for authentication.
242+
If multiple IdPs are configured in the OIDC module, the following two mechanisms are supported for selecting the IdP:
243+
244+
1. Depending on deeplink, your application logic may redirect to a IdP-specific endpoint.
245+
2. In this mechanism, your end users make the selection. Your app logic can use the same URL (`<your-app-url>/oauth/v2/login`) to initiate authentication. End users will first be redirected to an IdP selection page, where they can choose the IdP they want to use for authentication.
243246

244247
{{% alert color="info" %}}
245-
In OIDC SSO version 4.1.0 and above, you do not have to enable anonymous users for multiple IdPs. You can remove the `Anonymous` User Role from the module.
248+
In OIDC SSO version 4.1.0 and above, you do not have to enable anonymous users for multiple IdPs. Additionally, check whether `Anonymous` user role can be removed from the app. If your application does not require anonymous access, removing the role is recommended as a security best practice.
246249
{{% /alert %}}
247250

248251
### Configuring Navigation{#configure-nav}

0 commit comments

Comments
 (0)