Open
Description
Document issue type
Type/Improvement (Suggest changes to enhance the clarity, usability, or accuracy of existing content)
Description
The x509 certificate documentation at [1] seems to be missing some steps and requires to be updated. The following points can be addressed as an improvement.
- The sub step c) of step 7 asks to add two properties to a openssl config file.
- However the two file locations given can be changed based on the openssl installation method and is also OS dependent.
- Also the file could be read only based on the OS (ex: the
openssl.cnf
file is read only in Mac OS) and would be better ask to take a copy of the file and edit it. - Also the property defined as
x509\_extensions
has a typo and could also be different based on the openssl installation method.
- Also instead of adding the certificate to a new keystore, it can be added to the default truststore of identity server. However need to clarify whether this is a mandatory step.
- Step 3 and 4 of "Configure the Authentication Endpoint" seems to be optional. However the documentation could be bit misleading.
- The requirement to perform "Add a claim mapping for the certificate" step depend on the choice for the above point.
- The browser steps given under "Import certificate" seems to be outdated with the latest browser versions. Need to add the correct steps or point to a browser documentation.
- Application registration steps under "Register an app" section needs to be updated as per the new UI.
[1] https://is.docs.wso2.com/en/latest/guides/authentication/mfa/add-x509-login/
Version
IS 7.1.0
Metadata
Metadata
Assignees
Type
Projects
Status
No status