Quentin Gliech and Andrew Morgan
cae99ccef3
Adapt punctionation in docs
...
Co-Authored-By: Andrew Morgan <andrewm@element.io >
2026-07-29 14:52:02 +02:00
Quentin Gliech
e7c57e013a
Expose a logged_out variable to upstream authorization parameter templates
...
When a browser signs out (or discovers its session was ended), the
session cookie now remembers when that happened; the flag is cleared by
the next successful login. The `additional_authorization_parameters`
templates can read it as `logged_out`, so operators can force a fresh
prompt at the upstream provider after sign-out, e.g.:
additional_authorization_parameters:
prompt: "{% if logged_out %}login{% endif %}"
This addresses the "sign out signs me back in" loop with upstream SSO
providers that still hold a live session.
Fixes #1569
2026-07-10 15:55:14 +02:00
Quentin Gliech
670cdce15e
docs: fix stale config references in setup and CLI docs
...
This is a pass on the whole setup guide to make sure all the configuration
options are correctly referenced.
2026-06-25 19:04:18 +02:00
Quentin Gliech and GitHub
9815902e9b
Allow passing arbitrary values from clients down to upstream OAuth providers ( #5677 )
2026-06-17 16:28:57 +02:00
Quentin Gliech
6b8decf609
Document MiniJinja templating for additional_authorization_parameters
...
Updates the field doc-comment to describe the new templating semantics
and adds a deprecation note on `forward_login_hint` pointing to the
recommended replacement. Regenerates the JSON schema.
The runtime behavior (template rendering, forward_login_hint
soft-deprecation) is wired up in follow-up commits.
2026-05-13 17:44:15 +02:00
André Pinto and GitHub
493b2589ba
Update sso.md
...
adding authelia configuration fix so that preferred_username is populated accordingly.
2026-05-10 22:15:08 -03:00
CEbbinghaus and GitHub
fbc6cd0783
Added signing alg setting to provider yaml
2026-01-28 11:08:35 +11:00
CEbbinghaus
0dff4d628f
Added Kanidm Sample configuration
2026-01-23 21:41:45 +11:00
Quentin Gliech and GitHub
8384a5af4c
Merge branch 'main' into quenting/upstream-oauth/better-conflict-options
2025-11-28 18:10:22 +01:00
Quentin Gliech
c5ba1f610d
Check for the new on_conflict options & update docs
2025-11-28 16:10:07 +01:00
copilot-swe-agent[bot] and sandhose
b2fb289c37
Add complete Shibboleth metadata file example
...
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com >
2025-11-27 16:48:00 +00:00
copilot-swe-agent[bot] and sandhose
af15767135
Remove deprecated set_email_verification option from docs
...
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com >
2025-11-27 15:47:37 +00:00
copilot-swe-agent[bot] and sandhose
fc7e2e3f57
Remove unnecessary userinfo_endpoint from Shibboleth config
...
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com >
2025-11-27 15:38:21 +00:00
copilot-swe-agent[bot] and sandhose
0d10e148a7
Add Shibboleth sample configuration to SSO documentation
...
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com >
2025-11-27 15:31:20 +00:00
mcalinghee and Olivier D
98912f4ada
allow importing existing users when the localpart matches in upstream OAuth 2.0 logins
2025-07-21 09:52:24 +02:00
Quentin Gliech
3bc3db1527
Add documentation for backchannel logout
2025-07-04 16:27:10 +02:00
Adis Veletanlic and GitHub
f8114be322
Merge branch 'element-hq:main' into main
2025-04-16 08:40:03 +02:00
Adis Veletanlic
0e50c44605
Add private_key_file option for apple sso and edit docs
2025-04-14 12:21:00 +02:00
Przemysław Romanik and GitHub
d32c9a8b70
fix(docs): add token_endpoint_auth_method in Authentik SSO example
2025-04-11 00:17:02 +02:00
hummingbard
9f925e6f09
Added upstream sample config for Discord, brand logo in templates
2025-03-30 15:53:56 +06:00
hummingbard
ecef762e9e
Missing token_endpoint_auth_method field in upstream sample config for Github
2025-03-30 14:08:14 +06:00
Kieran Lane and GitHub
5996cac327
Disable Verification for Microsoft Azure AD OIDC
...
Required to avoid `token_endpoint missing auth signing algorithm values` error.
2025-03-18 10:44:45 +00:00
Quentin Gliech
cd078cb567
Document the new usptream OAuth 2.0 configuration options
2025-01-06 11:59:53 +01:00
1434429b6c
Include example SSO config for Rauthy. ( #3725 )
...
Co-authored-by: Quentin Gliech <quenting@element.io >
2024-12-19 15:26:02 +00:00
Quentin Gliech
93bbfabf8e
Document how to set up Sign-in with Apple
2024-11-22 08:48:00 +01:00
hatch01 and Quentin Gliech
ba6d69b4a4
fix sso exemple config for authelia
2024-11-18 08:47:38 +01:00
Thilo-Alexander Ginkel and Quentin Gliech
c13c8860c5
Add SSO sample configuration for Authelia
...
Signed-off-by: Thilo-Alexander Ginkel <tg@tgbyte.de >
2024-10-25 09:00:45 +02:00
Quentin Gliech
87dc0debbf
docs: Rename the "usage" section to "reference"
2024-05-14 10:44:41 +02:00
Quentin Gliech
7f9d62f409
Update documentation about syncing the configuration with the database
2024-03-01 18:14:05 +01:00
Quentin Gliech and Will Lewis
eebbf2ff6c
Apply suggestions from code review
...
Co-authored-by: Will Lewis <willl@element.io >
2023-11-22 15:13:28 +01:00
Quentin Gliech
ef23b06261
Mention the configuration file reference in the SSO guide
2023-11-22 15:13:28 +01:00
Quentin Gliech
9bd46b5496
Document how upstream OAuth 2.0 providers should be setup
2023-11-22 15:13:28 +01:00
