diff --git a/docs/openfaas-pro/sso/google.md b/docs/openfaas-pro/sso/google.md index 9f135514..8246745c 100644 --- a/docs/openfaas-pro/sso/google.md +++ b/docs/openfaas-pro/sso/google.md @@ -52,11 +52,10 @@ This guide will cover how to configure Google as an identity provider for OpenFa !!! note "SSO with the faas-cli" Google does not support the Authorization Code flow with Proof Key of Code Exchange (PKCE). - To login with the faas-cli use the Implicit Id flow. + When the faas-cli detects a Google client ID, it automatically uses the Implicit Id flow and the authority `https://accounts.google.com`. + These defaults can be overridden with the `--grant` and `--authority` flags. ```sh faas-cli pro auth \ - --grant implicit-id \ - --authority https://accounts.google.com \ - --client-id CLIENT_ID - ``` \ No newline at end of file + --client-id CLIENT_ID.apps.googleusercontent.com + ``` diff --git a/docs/openfaas-pro/sso/microsoft-entra.md b/docs/openfaas-pro/sso/microsoft-entra.md index ea094bbf..2293ae57 100644 --- a/docs/openfaas-pro/sso/microsoft-entra.md +++ b/docs/openfaas-pro/sso/microsoft-entra.md @@ -68,7 +68,8 @@ This guide covers how to configure [Microsoft Entra]() as an identity provider f !!! Note "SSO with the faas-cli" - By default the faas-cli pro auth listens for OAuth callbacks on the address `http://127.0.0.1`. Entra does not support using the loopback address for redirect URIs. You need to explicitly set the flag `--redirect-host=http://localhost` to override the default value. + The faas-cli defaults to `--redirect-host=http://localhost` when a Microsoft Entra authority is configured because Entra does not support using a loopback IP address for redirect URIs. + The callback address can be overridden with the `--redirect-host` flag. To login with the faas-cli when using Azure Entra as the identity provider we recommend using the Implicit Id flow. @@ -76,6 +77,5 @@ This guide covers how to configure [Microsoft Entra]() as an identity provider f faas-cli pro auth \ --grant=implicit-id \ --authority=https://login.microsoftonline.com/1fe3798478-5987-2564-b4aa-99e587365024/v2.0 \ - --client-id=068cb5cb-8cc3-4d57-8263-d6c6ce52ddff \ - --redirect-host=http://localhost - ``` \ No newline at end of file + --client-id=068cb5cb-8cc3-4d57-8263-d6c6ce52ddff + ```