docs: Simplify onelogin sso intructions (#17554)

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
This commit is contained in:
Hugo Shaka 2022-10-21 17:09:35 -04:00 committed by GitHub
parent 31a2bea9f4
commit a458b41143
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
4 changed files with 2 additions and 20 deletions

Binary file not shown.

Before

Width:  |  Height:  |  Size: 138 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 233 KiB

View file

@ -86,24 +86,8 @@ Write down this template as `onelogin-connector.yaml`:
(!examples/resources/onelogin-connector.yaml!)
```
To fill in the fields, open `SSO` tab:
![Configure APP](../../../img/sso/onelogin/onelogin-saml-6.png)
- `acs` - is the name of the teleport web proxy, e.g. `https://teleport.example.com/v1/webapi/saml/acs`
- `issuer` - use value from `Issuer URL field`, e.g. `https://app.onelogin.com/saml/metadata/123456`
- `sso` - use the value from the value from field `SAML 2.0 Endpoint (HTTP)` but replace `http-post` with `http-redirect`, e.g. `https://mycompany.onelogin.com/trust/saml2/http-redirect/sso/123456`
<Admonition
type="tip"
title="Important"
>
Make sure to replace `http-post` with `http-redirect`.
</Admonition>
- `cert` - download certificate, by clicking "view details link" and add to `cert` section
![Configure APP](../../../img/sso/onelogin/onelogin-saml-7.png)
Update the `acs` value with your public cluster URL and paste the SAML metadata that you
previously downloaded in `entity_descriptor`.
Create the connector using `tctl` tool:

View file

@ -8,8 +8,6 @@ spec:
- {name: "groups", value: "admin", roles: ["editor"]}
- {name: "groups", value: "dev", roles: ["access"]}
display: OneLogin
issuer: https://app.onelogin.com/saml/metadata/123456
sso: https://mycompany.onelogin.com/trust/saml2/http-redirect/sso/123456
entity_descriptor: |
# Paste in downloaded content from OneLogin Dashboard.
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="http://www.example.com/00000000000000000000">