@@ -34,6 +34,8 @@ Procedure
34
34
Select your authentication method from the following options:
35
35
36
36
- :ref:`Username / Password <username-password>`
37
+
38
+ - :ref:`OIDC <oidc>`
37
39
38
40
- :ref:`X.509 <x509>`
39
41
@@ -82,6 +84,44 @@ Procedure
82
84
83
85
- :manual:`SCRAM-SHA-256 </core/security-scram/>`
84
86
87
+ .. _oidc:
88
+
89
+ OIDC
90
+ ~~~~
91
+
92
+ Select :guilabel:`OIDC` if the deployment uses :manual:`OpenID Connect </core/security-oidc/>`
93
+ as its authentication mechanism.
94
+
95
+ Provide the following information:
96
+
97
+ .. list-table::
98
+ :header-rows: 1
99
+ :widths: 50 50
100
+
101
+ * - Field
102
+ - Description
103
+
104
+ * - Username
105
+ - Optional. OpenID Connect username.
106
+
107
+ * - Auth Code Flow Redirect URI
108
+ - Optional. Specify a URI where the identity provider redirects you after authentication.
109
+ The URI must match the configuration of the Identity Provider.
110
+ The default is ``http://localhost:27097/redirect``.
111
+
112
+ * - Consider Target Endpoint Trusted
113
+ - Optional. Allows connecting to a target endpoint that is not in the
114
+ list of endpoints that are considered trusted by default. Only use
115
+ this option when connecting to servers that you trust.
116
+
117
+ * - Enable Device Authentication Flow
118
+ - Optional. When the :ref:`Show Device Auth Flow Checkbox <compass-settings-reference>`
119
+ setting is enabled, |compass-short| can provide you with a URL and code
120
+ to finish authentication.
121
+
122
+ This is a less secure authentication flow that can be used as a
123
+ fallback when browser-based authentication is unavailable.
124
+
85
125
.. _x509:
86
126
87
127
X.509
0 commit comments