Document the new OpenLDAP configuration feature for Okta auth providers (#599)

* Update Shibboleth OpenLDAP instructions to reflect current UI

These settings would have, if followed verbatim, actually configured
an OpenLDAP Auth Provider, bypassing Shibboleth entirely. In order
to configure a Shibboleth provider with added OpenLDAP, one must start
with a Shibboleth base, not an OpenLDAP one.

* Document the new OpenLDAP functionality for Okta Auth Providers

These changes are pulled directly from the Shibboleth provider with
minimal touchups to ensure the correct UI elements are referenced
in steps. I've tried to include all relevant warnings and security
callouts, but I've otherwise left the language alone, as the original
text seems fine.

* Cleaned up language and updated several links, based on feedback

* Remove/cleanup language. OpenLDAP is not required for group permissions

Also some light rearrangement for flow, a few redundant statements
removed, and syntax cleanup on one of the lists.

* Add link to Okta user account creation instructions

Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>

* Edit TLS notice language for brevity

Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>

* Warn that the service account is shared across all of Rancher

---------

Co-authored-by: Marty Hernandez Avedon <martyavedon@gmail.com>
This commit is contained in:
nflynt
2023-06-29 10:17:44 -04:00
committed by GitHub
co-authored by Marty Hernandez Avedon
parent 25c8ae00d8
commit 00609cd1b0
2 changed files with 44 additions and 4 deletions
@@ -94,7 +94,8 @@ Configure the settings for the OpenLDAP server, groups and users. For help filli
1. Log into the Rancher UI using the initial local `admin` account.
1. In the top left corner, click **☰ > Users & Authentication**.
1. In the left navigation menu, click **Auth Provider**.
1. Click **OpenLDAP**. The **Configure an OpenLDAP server** form will be displayed.
1. Click **Shibboleth** or, if SAML is already configured, **Edit Config**
1. Under **User and Group Search**, check **Configure an OpenLDAP server**
## Troubleshooting