trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

website/docs: update ldap provider docs 

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
This commit is contained in:
Jens Langhammer 2023-01-20 11:46:57 +01:00
parent 8deac81364
commit 3a59b75f4a
No known key found for this signature in database
3 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
website/docs/flow/executors/headless.md
View File

@ -8,4 +8,4 @@ The following stages are supported:
- [**identification**](../stages/identification/) - [**identification**](../stages/identification/)
- [**password**](../stages/password/) - [**password**](../stages/password/)
- [**authenticator_validate**](../stages/authenticator_validate/) (currently only DUO devices are supported) - [**authenticator_validate**](../stages/authenticator_validate/)

2
website/docs/providers/ldap/generic_setup.md
View File

@ -11,7 +11,7 @@ title: Generic Setup
2. Create a new group for LDAP searches. In this example `ldapsearch`. Add the `ldapservice` user to this new group. 2. Create a new group for LDAP searches. In this example `ldapsearch`. Add the `ldapservice` user to this new group.
:::info :::info
Note: The `default-authentication-flow` validates MFA by default, and currently only Duo-based MFA devices are supported by LDAP. If you plan to use only dedicated service accounts to bind to LDAP, then you can use the default flow and skip the extra steps below and continue at [Create LDAP Provider](#create-ldap-provider) Note: The `default-authentication-flow` validates MFA by default, and currently everything but SMS-based devices are supported by LDAP. If you plan to use only dedicated service accounts to bind to LDAP, or don't use SMS-based authenticators, then you can use the default flow and skip the extra steps below and continue at [Create LDAP Provider](#create-ldap-provider)
::: :::
### LDAP Flow ### LDAP Flow

4
website/docs/providers/ldap/index.md
View File

@ -78,6 +78,10 @@ The following stages are supported:
SMS-based authenticators are not supported as they require a code to be sent from authentik, which is not possible during the bind. SMS-based authenticators are not supported as they require a code to be sent from authentik, which is not possible during the bind.
- [User Logout](../../flow/stages/user_logout.md)
- [User Login](../../flow/stages/user_login.md)
- [Deny](../../flow/stages/deny.md)
#### Direct bind #### Direct bind
In this mode, the outpost will always execute the configured flow when a new bind request is received. In this mode, the outpost will always execute the configured flow when a new bind request is received.