feat: Dev Portal SAML SSO #8118
Conversation
Signed-off-by: Diana <[email protected]>
cloudjumpercat
added
the
review:sme
✅ Deploy Preview for kongdocs ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
Signed-off-by: Diana <[email protected]>
…it since it was generic anyways Signed-off-by: Diana <[email protected]>
Signed-off-by: Diana <[email protected]>
Signed-off-by: Diana <[email protected]>
Signed-off-by: Diana <[email protected]>
Signed-off-by: Diana <[email protected]>
Signed-off-by: Diana <[email protected]>
|
I'm still working on testing team mappings and Dev Portal SAML, but the draft docs are now ready for tech review!
|
app/_includes/md/konnect/okta-sso.md
Outdated
| * **Single Sign-On URL**: `https://global.api.konghq.com/v2/authenticate/login_path/saml/acs` | ||
| * **Audience URI (SP Entity ID)**: `https://cloud.konghq.com/sp/SP_ID` | ||
|
|
||
| 1. Optional: In the **Attribute Statements**, add the following three attributes: |
There was a problem hiding this comment.
This doesn't mention why a user would want to configure this and I'm not sure what the answer to that is.
|
|
||
| 1. [Add users to the Okta application](https://help.okta.com/en-us/content/topics/users-groups-profiles/usgp-assign-apps.htm). | ||
|
|
||
| 1. [Generate a signing certificate](https://help.okta.com/en-us/content/topics/apps/manage-signing-certificates.htm) to use in {{site.konnect_short_name}}. |
There was a problem hiding this comment.
There's no place to put the cert in konnect, so I just need to generate it and activate it?
Signed-off-by: Diana <[email protected]>
| * [Configure generic SSO for a Konnect Org](/konnect/org-management/sso/) | ||
| * [IdP SSO attribute mapping reference](/konnect/reference/sso) |
There was a problem hiding this comment.
Should we add this section for Dev Portal "Configure Okta" page as well: https://docs.konghq.com/konnect/org-management/okta-idp/#add-a-user-to-your-application?
There was a problem hiding this comment.
Adding users to the application is one of the steps in this section (it's step 3 for OIDC and step 4 for SAML). That step is a link to the Okta doc because if we write out the steps ourselves like we did in the current Org Okta SSO doc, they quickly become out-dated. And I tested the flow with the Okta doc and thought it was accurate and helpful.
So, it is annoying as a user to have to go to yet another link for more instructions, but the instructions are more likely to be accurate this way if we use Okta's.
Signed-off-by: Diana <[email protected]>
Signed-off-by: Diana <[email protected]>
Signed-off-by: Diana <[email protected]>
| * **Sign-in redirect URIs**: `https://cloud.konghq.com/login` (This is a placeholder value that you'll replace later) | ||
| * **Sign-out redirect URIs**: `https://cloud.konghq.com/login` (This is a placeholder value that you'll replace later) | ||
| {% endif %} | ||
| {% if include.desc == "Dev Portal" %} |
There was a problem hiding this comment.
For reviewers: This if include.desc bit isn't working in the output. It's showing the Konnect Org placeholders on both the Dev Portal pages and Konnect Org pages. Any idea what I'm doing wrong? I didn't get any errors in the Terminal when I ran this locally.
Description
SAML SSO is being added to Dev Portal. This PR adds instructions for it and creates SSO includes so that org SSO and Dev Portal SSO content can be shared.
This PR also fixes some outdated Okta SSO language, see DOCU-4120 for more information.
DOCU-4135
Testing instructions
Preview links:
Checklist