Skip to content

Commit

Permalink
Further fixes
Browse files Browse the repository at this point in the history
  • Loading branch information
federicaagostini committed Jun 27, 2024
1 parent 04d6796 commit 7c246a2
Show file tree
Hide file tree
Showing 3 changed files with 9 additions and 10 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -121,7 +121,7 @@ the default IAM configuration.

## Registration form: filling information from IdP

See [registration configuration][external-idp-config]
See [registration configuration][external-idp-config].

[external-idp-config]: {{< ref "/docs/reference/configuration/registration/#registration-with-external-idp" >}}
[google-oidc]: https://developers.google.com/identity/protocols/OpenIDConnect
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -258,7 +258,7 @@ instructions on how to override the default IAM configuration.

## Registration form: filling information from IdP

See [registration configuration][external-idp-config]
See [registration configuration][external-idp-config].

[external-idp-config]: {{< ref "/docs/reference/configuration/registration/#registration-with-external-idp" >}}

15 changes: 7 additions & 8 deletions content/en/docs/reference/configuration/registration/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,8 @@ weight: 6
---

IAM implements a basic registration service that requires the intervention
of an IAM admin. In when, users apply for membership in an
organization, and administrators are asked to validate membership requests.
of an IAM admin. In fact, when users apply for membership in an
organization, administrators are asked to validate membership requests.


## Registration with external IdP
Expand Down Expand Up @@ -34,12 +34,11 @@ iam:
To require that users must authenticate through an external IdP, you need to set the
parameter `require-external-authentication=true`. You can also specify the type of external
IdP required (`oidc` or `saml`) and require one specific issuer.
IdP (`oidc` or `saml`) and require one specific issuer.

The following fragment requires authentication with the
(OIDC-based) CERN SSO.

and defines how information from identity tokens issued by CERN SSO is
The following fragment is an example of authentication with the
(OIDC-based) CERN SSO required before being redirected to the registration page.
It also defines how information from identity tokens issued by CERN SSO is
mapped to IAM membership information

```yaml
Expand All @@ -53,7 +52,7 @@ iam:

### Filling information from IdP

The first time a user authenticates in IAM instance, the account creation form will be displayed. It is possible to request
The first time a user authenticates in an IAM instance, the account creation form will be displayed. It is possible to request
that some of the fields are filled with the value of an IdP attribute and to define that some of these fields are read-only,
i.e. that the value provided by the IdP cannot be changed.

Expand Down

0 comments on commit 7c246a2

Please sign in to comment.