Update janssenauthserver-feature-flags.md

[mzico]

Adding how to access "Feature Flag" property

Prepare

• Read PR guidelines
• Read license information

---

Description

Target issue

closes #issue-number-here

Implementation Details

---

Test and Document the changes

• Static code analysis has been run locally and issues have been fixed
• Relevant unit and integration tests have been added/updated
• Relevant documentation has been updated if any (i.e. user guides, installation and configuration guides, technical design docs etc)

Please check the below before submitting your PR. The PR will not be merged if there are no commits that start with docs: to indicate documentation changes or if the below checklist is not selected.

• I confirm that there is no impact on the docs due to the code changes in this PR.

[dryrunsecurity]

DryRun Security Summary

The pull request updates the documentation for the Janssen Auth Server's feature flags, including instructions on accessing them in the Thin User Interface (TUI) and descriptions of security-critical functionalities such as CIBA, device authorization, token introspection, token revocation, and UMA.

Expand for full summary

Summary:

The code change in this pull request appears to be an update to the documentation for the Janssen Auth Server's feature flags. The changes include the addition of a new section that provides instructions on how to access the feature flags within the Thin User Interface (TUI) of the auth server. From an application security perspective, the feature flags described in this documentation are particularly interesting as they provide a way to enable or disable various security-related functionalities of the auth server, such as support for the OpenID Connect Client Initiated Backchannel Authentication Flow (CIBA), device authorization, token introspection, token revocation, and User-Managed Access (UMA). It's important to ensure that these feature flags are properly configured and managed to maintain the overall security of the auth server and the applications that rely on it.

Files Changed:

• docs/admin/reference/json/feature-flags/janssenauthserver-feature-flags.md: This file has been updated to include a new section that provides instructions on how to access the feature flags within the Thin User Interface (TUI) of the Janssen Auth Server. The documentation also describes several notable feature flags that are related to security-critical functionalities, such as CIBA, device authorization, token introspection, token revocation, and UMA. Developers and security engineers should review the feature flags and their descriptions to understand the security implications of enabling or disabling each one.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[ossdhaval]

Hi @mzico

This file is auto-generated. So all edits to this file will be lost in the next cycle.

If you want to add this content add it via code at this location

The merge-base changed after approval.