From 03d2e3b91cc4f12cf77536d989702a3d03fbfcae Mon Sep 17 00:00:00 2001 From: Desmi-Dizney <99777687+Desmi-Dizney@users.noreply.github.com> Date: Mon, 6 Jun 2022 16:19:09 -0500 Subject: [PATCH] Editor pass - Update SSO Documentation (#6092) Editor pass for: - https://github.com/fleetdm/fleet/pull/5583 --- docs/Deploying/Configuration.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/Deploying/Configuration.md b/docs/Deploying/Configuration.md index 15cd2b709d..d13da0adaa 100644 --- a/docs/Deploying/Configuration.md +++ b/docs/Deploying/Configuration.md @@ -2353,7 +2353,7 @@ After supplying the above information, the IDP will generate an issuer URI and a A Fleet user must be assigned the Admin role to configure Fleet for SSO. In Fleet, SSO configuration settings are located in **Settings > Organization settings > SAML single sign on options**. -If your IDP supports dynamic configuration, like Okta, you only need to provide an _identity provider name_ and _entity ID_, then paste a link in the metadata URL field. Ensure that you create the SSO application within your IDP before configuring it in Fleet. +If your IDP supports dynamic configuration, like Okta, you only need to provide an _identity provider name_ and _entity ID_, then paste a link in the metadata URL field. Make sure that you create the SSO application within your IDP before configuring it in Fleet. Otherwise, the following values are required: @@ -2384,7 +2384,7 @@ It is strongly recommended that at least one admin user is set up to use the tra based log in so that there is a fallback method for logging into Fleet in the event of SSO configuration problems. -> Individual users must also be setup on the IDP before they can sign in to Fleet. +> Individual users must also be set up on the IDP before they can sign in to Fleet. ### Enabling SSO for existing users in Fleet As an admin, you can enable SSO for existing users in Fleet. To do this, go to the Settings page, then click on the Users tab. Locate the user you want to enable SSO for and on the actions dropdown menu for that user, click on "Enable single sign on". @@ -2392,11 +2392,11 @@ As an admin, you can enable SSO for existing users in Fleet. To do this, go to t ![Example Okta IDP Configuration](https://raw.githubusercontent.com/fleetdm/fleet/main/docs/images/okta-idp-setup.png) -Once configured, you will need to retrieve the Issuer URI from the `View Setup Instructions` and metadata URL from the `Identity Provider metadata` link within the application `Sign on` settings. See below on where to find them: +Once configured, you will need to retrieve the Issuer URI from the `View Setup Instructions` and metadata URL from the `Identity Provider metadata` link within the application `Sign on` settings. See below for where to find them: ![Where to find SSO links for Fleet](https://raw.githubusercontent.com/fleetdm/fleet/main/docs/images/okta-retrieve-links.png) -> The Proivder Sign-on URL within the `View Setup Instructions` has a similar format as the Provider SAML Metadata URL, but this link does provides a redirect to _sign-in_ the application, not the metadata necessary for dynamic configuration. +> The Provider Sign-on URL within the `View Setup Instructions` has a similar format as the Provider SAML Metadata URL, but this link provides a redirect to _sign-in_ the application, not the metadata necessary for dynamic configuration. > The names of the items required to configure an identity provider may vary from provider to provider and may not conform to the SAML spec.