Skip to content

Commit

Permalink
[7.6] [DOCS] Adds authentication settings (#96479)
Browse files Browse the repository at this point in the history
* [DOCS] Adds authentication settings

* Review comments

* Review comments

* Review comments
  • Loading branch information
KOTungseth authored Apr 12, 2021
1 parent b013b0f commit ab8b273
Showing 1 changed file with 44 additions and 0 deletions.
44 changes: 44 additions & 0 deletions docs/settings/security-settings.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,50 @@ You do not need to configure any additional settings to use the

|===

[float]
[[authentication-security-settings]]
==== Authentication security settings

You configure the authentication settings in the `xpack.security.authc.providers` namespace. For more information, refer to <<kibana-authentication>>.

[cols="2*<"]
|===
| `xpack.security.authc.providers`
| Specifies the types of authentication providers.
|===

For example:

[source,yml]
--------------------------------------------------
xpack.security.authc.providers: [saml, basic, oidc]
--------------------------------------------------

[float]
[[saml-authentication-provider-settings]]
===== SAML authentication provider settings

[cols="2*<"]
|===
| `xpack.security.authc.providers.`
`saml.<provider-name>.realm`
| When specified in `xpack.security.authc.providers`, the SAML realm in {es} that the `saml` provider should use.

| `xpack.security.authc.saml.maxRedirectURLSize`
| Specifies the maximum size of the URL that {kib} is allowed to store during the SAML handshake.
|===

[float]
[[oidc-authentication-provider-settings]]
===== OpenID Connect authentication provider setting

[cols="2*<"]
|===
| `xpack.security.authc.providers.`
`oidc.<provider-name>.realm`
| When specified in `xpack.security.authc.providers`, the OpenID Connect realm in {es} that the `oidc` provider should use.
|===

[float]
[[security-ui-settings]]
==== User interface security settings
Expand Down

0 comments on commit ab8b273

Please sign in to comment.