Skip to content

Commit 7c7e6b1

Browse files
authored
DOCSP-45739 Adds nonce in Auth Req to OIDC connection settings (#700)
* DOCSP-45739 Adds nonce in Auth Req to OIDC connection settings * Responds to feedback
1 parent 6b7f07d commit 7c7e6b1

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

source/connect/advanced-connection-options/authentication-connection.txt

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -133,6 +133,13 @@ Procedure
133133
settings, |compass-short| uses the same proxy to connect to both
134134
the cluster and identity provider.
135135

136+
* - Send a nonce in the Auth Code Request
137+
- Optional. Includes a random nonce as a part of the auth code
138+
request to prevent replay attacks. Enabled by default.
139+
140+
The nonce is an important security component. Only disable this
141+
setting if it is not supported by your OIDC provider.
142+
136143
.. _x509:
137144

138145
X.509

0 commit comments

Comments
 (0)