From d3ade82f3f3d5911a0a7c1c6e4aadadf6556d6c4 Mon Sep 17 00:00:00 2001 From: Ryan Richard Date: Tue, 19 Oct 2021 09:48:40 -0700 Subject: [PATCH] Update docs --- site/content/docs/howto/configure-supervisor-with-dex.md | 2 +- site/content/docs/howto/configure-supervisor-with-gitlab.md | 6 ++++-- site/content/docs/howto/configure-supervisor-with-okta.md | 2 +- 3 files changed, 6 insertions(+), 4 deletions(-) diff --git a/site/content/docs/howto/configure-supervisor-with-dex.md b/site/content/docs/howto/configure-supervisor-with-dex.md index 723be7cf8..79a5ea35b 100644 --- a/site/content/docs/howto/configure-supervisor-with-dex.md +++ b/site/content/docs/howto/configure-supervisor-with-dex.md @@ -91,7 +91,7 @@ spec: # Request any scopes other than "openid" for claims besides # the default claims in your token. The "openid" scope is always # included. - additionalScopes: [groups, email] + additionalScopes: [offline_access, groups, email] # If you would also like to allow your end users to authenticate using # a password grant, then change this to true. diff --git a/site/content/docs/howto/configure-supervisor-with-gitlab.md b/site/content/docs/howto/configure-supervisor-with-gitlab.md index eb372dec4..97058c16b 100644 --- a/site/content/docs/howto/configure-supervisor-with-gitlab.md +++ b/site/content/docs/howto/configure-supervisor-with-gitlab.md @@ -63,8 +63,10 @@ spec: # GitLab is unusual among OIDC providers in that it returns an # error if you request the "offline_access" scope during an # authorization flow, so ask Pinniped to avoid requesting that - # scope when using GitLab. - doNotRequestOfflineAccess: true + # scope when using GitLab by excluding it from this list. + # By specifying only "openid" here then Pinniped will only + # request "openid". + additionalScopes: [openid] # If you would also like to allow your end users to authenticate using # a password grant, then change this to true. diff --git a/site/content/docs/howto/configure-supervisor-with-okta.md b/site/content/docs/howto/configure-supervisor-with-okta.md index 0890fa2f5..62110444e 100644 --- a/site/content/docs/howto/configure-supervisor-with-okta.md +++ b/site/content/docs/howto/configure-supervisor-with-okta.md @@ -74,7 +74,7 @@ spec: # # To learn more about how to customize the claims returned, see here: # https://developer.okta.com/docs/guides/customize-tokens-returned-from-okta/overview/ - additionalScopes: [groups, email] + additionalScopes: [offline_access, groups, email] # If you would also like to allow your end users to authenticate using # a password grant, then change this to true. Password grants only work