Skip to content

Commit 53ab8b3

Browse files
authored
Revert "Revert "Including info on OpenID Additional Parameters (#5600)" (#5686)"
This reverts commit 3ec0aa4.
1 parent 0ad53ab commit 53ab8b3

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

_security/authentication-backends/openid-connect.md

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -364,6 +364,19 @@ opensearch.requestHeadersAllowlist: ["Authorization", "securitytenant"]
364364
To include OpenID Connect with other authentication types in the Dashboards sign-in window, see [Configuring sign-in options]({{site.url}}{{site.baseurl}}/security/configuration/multi-auth/).
365365
{: .note }
366366

367+
### Additional parameters
368+
369+
Some identity providers require custom parameters to complete the authentication process. You can add custom parameters `opensearch_dashboards.yml` configuration file under the `opensearch_security.openid.additional_parameters` namespace. You can find these additional parameters by making a GET request to your identity provider. This feature allows for greater flexibility and customization when communicating with various identity providers.
370+
371+
In the following example, two custom parameters, `foo` and `acr_values`, and their values, `bar` and `1`, were found using a GET request to OpenID provider:
372+
373+
```yml
374+
opensearch_security.openid.additional_parameters.foo: "bar"
375+
opensearch_security.openid.additional_parameters.acr_values: "1"
376+
```
377+
{% include copy.html %}
378+
379+
367380

368381
#### Session management with additional cookies
369382

0 commit comments

Comments
 (0)