You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: en/platform/configure-sso.mdx
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -41,7 +41,7 @@ The egress IPs above apply only to Flashduty's **SaaS (public cloud) service**.
41
41
| Stable User ID Field (`user_id`) | Optional. The unique user identifier attribute returned by the identity provider, used to recognize the same member; email or phone changes do not affect recognition. If left empty, members are matched by the email/phone fields below. Recommended value: `employee_id`; enter `name_id` to use the NameID (Subject) of the SAML assertion. See [Member Association](#member-association) below |
42
42
| Create Account on Sign In | Enabled by default; when disabled, members must be invited before they can sign in |
43
43
| SSO-only login (`force_sso`) | Enabled by default. When on, every member of this account can sign in only via SSO; password and verification-code sign-in are rejected. See [SSO-only login](#sso-only-login) below |
44
-
|Flashcat Service Provider Info |**Service Provider Metadata** and **Assertion Consumer Service URL** (assertion address for identity provider to call for single sign-on) |
44
+
|Flashduty Service Provider Info |**Service Provider Metadata** and **Assertion Consumer Service URL** (assertion address for identity provider to call for single sign-on) |
45
45
46
46
## Configuring OIDC Protocol
47
47
@@ -60,7 +60,7 @@ The egress IPs above apply only to Flashduty's **SaaS (public cloud) service**.
60
60
| Create Account on Sign In | Enabled by default; when disabled, members must be invited before they can sign in |
61
61
| SSO-only login (`force_sso`) | Enabled by default. When on, every member of this account can sign in only via SSO; password and verification-code sign-in are rejected. See [SSO-only login](#sso-only-login) below |
62
62
| Scopes | Specifies the information and functionality permissions the request can access, with support for customization. Defaults to `openid`, `profile`, `email`, `phone`; you can add custom scopes as tags |
63
-
|Flashcat Service Provider Info |**Redirect URL**: Identity provider callback address<br />**Supported Signing Algorithms**: RS256, RS384, RS512, ES256, ES384, ES512, PS256, PS384, PS512 (HS256 not supported) |
63
+
|Flashduty Service Provider Info |**Redirect URL**: Identity provider callback address<br />**Supported Signing Algorithms**: RS256, RS384, RS512, ES256, ES384, ES512, PS256, PS384, PS512 (HS256 not supported) |
64
64
65
65
<Warning>
66
66
Scopes is a required field. The default values `openid`, `profile`, `email`, `phone` are the base permissions needed for OIDC to function properly. Removing these defaults may cause single sign-on to fail or prevent correct retrieval of user information. If you need to add custom scopes, add them while keeping the defaults intact.
@@ -82,7 +82,7 @@ Scopes is a required field. The default values `openid`, `profile`, `email`, `ph
82
82
| Stable User ID Field (`user_id`) | Optional. The unique user identifier used to recognize the same member; email or phone changes do not affect recognition. If left empty, members are matched by the email/phone fields below. Recommended value: `principal` (the CAS authenticated username); you can also map it to a returned attribute. See [Member Association](#member-association) below |
83
83
| Create Account on Sign In | Enabled by default; when disabled, members must be invited before they can sign in |
84
84
| SSO-only login (`force_sso`) | Enabled by default. When on, every member of this account can sign in only via SSO; password and verification-code sign-in are rejected. See [SSO-only login](#sso-only-login) below |
85
-
|Flashcat Service Provider Info |**Redirect URL**: Identity provider callback address |
85
+
|Flashduty Service Provider Info |**Redirect URL**: Identity provider callback address |
0 commit comments