Add SSO MFA docs #50533
Add SSO MFA docs #50533
Conversation
Joerger
added
documentation
no-changelog
github-actions
bot
requested review from
kiosion,
mmcallister,
nklaassen,
ptgott,
r0mant,
xinding33 and
zmb3
|
🤖 Vercel preview here: https://docs-mzyc3e21c-goteleport.vercel.app/docs |
|
Amplify deployment status
|
|
I still need to give this a proper review, but there are some internal links we need to fix for the preview build to work: |
| ### Considerations | ||
|
|
||
| Administrators may want to consider enabling this feature for the following benefits: | ||
|
|
||
| - All authentication (login and MFA) goes through the IDP, reducing administrative overhead | ||
| - Make custom MFA flows, such as prompting for 2 distinct devices for a single MFA check | ||
| - Integrate with non-webauthn devices supported directly by your IDP | ||
| - Enable new SSO users to carry out privileged actions without requiring them to register their device through Teleport first |
There was a problem hiding this comment.
I think we could condense this section with the one before by removing the "Considerations" heading" and one of the bullets. Then readers can get into the heart of the section a little more quickly.
There was a problem hiding this comment.
Removed the last bullet point and move it up as suggested.
| <TabItem label="OIDC"> | ||
|
|
||
| ```yaml | ||
| (!/examples/resources/oidc-connector-mfa.yaml!) |
There was a problem hiding this comment.
The partial doesn't render here—do we need to remove the leading slash?
There was a problem hiding this comment.
This also appears to be the case for existing sections in the preview, but those sections do load in the actual docs site.
| <TabItem label="SAML"> | ||
|
|
||
| ```yaml | ||
| (!/examples/resources/saml-connector-mfa.yaml!) |
There was a problem hiding this comment.
Same issue with this partial
Add documentation for the new SSO MFA feature. See the RFD for more details.