Applies To

• https://goteleport.com/docs/reference/cli/tsh/#tsh-login
• https://goteleport.com/docs/access-controls/sso

Details

A PR was implemented which adds useful callback functionality to tsh login, but nothing tells customers how to use it:

• Add --callback flag to tsh login #35457

There was also a subsequent security fix to add regex whitelisting for approved callback URLs:

• Validate client redirects in SSO client logins #41833

Neither of these PRs was documented, so customers have a hard time discovering this useful functionality.

How will we know this is resolved?

Documentation will exist for these features.

Related Issues

None currently.