Egor Mikhailov 18f49e015f auth: add new optional OIDCDisableUserInfo setting for OIDC auth provider (#19566) ...

Add new optional `OIDCDisableUserInfo` setting for OIDC auth provider which
disables a request to the identity provider to get OIDC UserInfo.

This option is helpful when your identity provider doesn't send any additional
claims from the UserInfo endpoint, such as Microsoft AD FS OIDC Provider:

> The AD FS UserInfo endpoint always returns the subject claim as specified in the
> OpenID standards. AD FS doesn't support additional claims requested via the
> UserInfo endpoint

Fixes #19318

2024-01-09 13:41:46 -05:00

100 B

Raw Permalink Blame History

View Raw