Skip to content

Repository navigation

docs(deploy): prefer CF_DIRECTORY_PROVIDER in the enterprise SSO example #47

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
opendev9 merged 1 commit into from
Oct 25, 2026
Merged

docs(deploy): prefer CF_DIRECTORY_PROVIDER in the enterprise SSO example #47

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 4 additions & 3 deletions deploy/compose/.env.enterprise-sso.example
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,9 +1,10 @@
# Enterprise Directory overrides; merge into the deployment environment before release.
# Generic OAuth defaults stay provider-neutral. No credentials belong in this file.
CF_SSO_OAUTH_LOGIN_ID_CLAIM=userId
# Namespace used by directory ACL rules, cf_sso_group_map rows and identity keys.
# Keep the value stable for an existing deployment; consumers may choose their own.
CF_ACL_PROVIDER=external
# Tenant namespace used by directory ACL rules, cf_sso_group_map rows and
# identity keys. Keep the value stable for an existing deployment.
# CF_DIRECTORY_PROVIDER is preferred; CF_ACL_PROVIDER remains a legacy alias.
CF_DIRECTORY_PROVIDER=external
# Audience of the machine-authenticated Directory JWT (must match the Directory side).
CF_DIRECTORY_AUDIENCE=eap-directory
# Optional: enable ONLY after the trusted Directory /administrators machine endpoint
Expand Down
2 changes: 1 addition & 1 deletion tests/test_admin_startup_hook.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -59,7 +59,7 @@ def test_enterprise_default_admin_compatibility_remains_opt_in(self):
# expected-account assertion is an operator opt-in in their own config.
self.assertIn('CF_PROVIDER_ADMIN_EXPECTED_ACCOUNT=', env)
self.assertNotIn('CF_PROVIDER_ADMIN_EXPECTED_ACCOUNT=admin', env)
self.assertIn('CF_ACL_PROVIDER=external', env)
self.assertIn('CF_DIRECTORY_PROVIDER=external', env)
self.assertIn('CF_DIRECTORY_AUDIENCE=eap-directory', env)

def test_nonroot_command_is_one_safely_quoted_shell_command(self):
Expand Down
Loading