col-panic commented on issue #195:
URL: https://github.com/apache/openserverless/issues/195#issuecomment-6126302867
This is interesting for me too. I see, that currently there is already some
sso login method it seems
```
Usage:
ops -login [options] <apihost> [<user>]
Login to an OpenServerless instance. If no user is specified, the default
user "openserverless" is used.
You can set the environment variables OPS_APIHOST and OPS_USER to avoid
specifying them on the command line.
You can set OPS_PASSWORD to avoid entering the password interactively.
When SSO is enabled, set OPS_SSO_LOGIN_FLOW=password or pass --sso-flow
password to use
OIDC password grant instead of the browser/device flow. OPS_SSO_USERNAME can
override the
identity-provider username when it differs from the OpenServerless namespace.
For backend-managed device flow, [<user>] explicitly requests workspace
binding; omit it
to use the namespace resolved from the authenticated identity.
Options:
--sso-flow FLOW SSO login flow: device or password. Default: device
--sso-username USER Identity-provider username for SSO password flow
-h, --help Show usage
error: missing apihost
```
but I cannot find more documentation on this? It does also not seem to go
into the direction of being a client to an external IdP (like keycloak is) as
there is no client-id or client-secret to be defined?!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
