Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Simplify anonymous access & embedding docs. #90409

Merged
merged 11 commits into from
Feb 23, 2021

Conversation

azasypkin
Copy link
Member

@azasypkin azasypkin commented Feb 5, 2021

Summary

Since #86965 is merged and we now have a more user-friendly approach to anonymously share dashboards, visualizations and saved searches, we shouldn't expose internal implementation details anymore.

Preview: https://kibana_90409.docs-preview.app.elstc.co/guide/en/kibana/master/kibana-authentication.html#anonymous-authentication

@azasypkin azasypkin added Team:Docs Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more! Feature:Security/Authentication Platform Security - Authentication v8.0.0 docs v7.11.0 v7.12.0 labels Feb 5, 2021
@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-docs (Team:Docs)

@elasticmachine
Copy link
Contributor

Pinging @elastic/kibana-security (Team:Security)

@azasypkin azasypkin added the release_note:skip Skip the PR/issue when compiling release notes label Feb 5, 2021
@@ -383,21 +383,11 @@ xpack.security.authc.providers:

One of the most popular use cases for anonymous access is when you embed {kib} into other applications and don't want to force your users to log in to view it. If you configured {kib} to use anonymous access as the sole authentication mechanism, you don't need to do anything special while embedding {kib}.

If you have multiple authentication providers enabled, and you want to automatically log in anonymous users when embedding, then you will need to add the `auth_provider_hint=<anonymous-provider-name>` query string parameter to the {kib} URL that you're embedding.
If you have multiple authentication providers enabled, and you want to automatically log in anonymous users when embedding dashboards or visualizations, then toggle `Public URL` switch presented in the embedding menu.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What do you think about including a screenshot of this switch within the embedding menu? That would help users discover the feature if they haven't used/seen the embedding menu before.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yep, was hesitating about that (quickly may become outdated and such), but since you mentioned.... I'll add it.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah I share your concerns about outdated screenshots. I struggle with the decision every time I write docs, too

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I agree that a screenshot is needed here.

@@ -383,21 +383,11 @@ xpack.security.authc.providers:

One of the most popular use cases for anonymous access is when you embed {kib} into other applications and don't want to force your users to log in to view it. If you configured {kib} to use anonymous access as the sole authentication mechanism, you don't need to do anything special while embedding {kib}.

If you have multiple authentication providers enabled, and you want to automatically log in anonymous users when embedding, then you will need to add the `auth_provider_hint=<anonymous-provider-name>` query string parameter to the {kib} URL that you're embedding.

This comment was marked as resolved.

This comment was marked as resolved.

This comment was marked as resolved.

This comment was marked as resolved.

@@ -383,21 +383,11 @@ xpack.security.authc.providers:

One of the most popular use cases for anonymous access is when you embed {kib} into other applications and don't want to force your users to log in to view it. If you configured {kib} to use anonymous access as the sole authentication mechanism, you don't need to do anything special while embedding {kib}.

If you have multiple authentication providers enabled, and you want to automatically log in anonymous users when embedding, then you will need to add the `auth_provider_hint=<anonymous-provider-name>` query string parameter to the {kib} URL that you're embedding.
If you have multiple authentication providers enabled, and you want to automatically log in anonymous users when embedding dashboards or visualizations, then toggle `Public URL` switch presented in the embedding menu.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I agree that a screenshot is needed here.

@@ -383,21 +383,11 @@ xpack.security.authc.providers:

One of the most popular use cases for anonymous access is when you embed {kib} into other applications and don't want to force your users to log in to view it. If you configured {kib} to use anonymous access as the sole authentication mechanism, you don't need to do anything special while embedding {kib}.

If you have multiple authentication providers enabled, and you want to automatically log in anonymous users when embedding, then you will need to add the `auth_provider_hint=<anonymous-provider-name>` query string parameter to the {kib} URL that you're embedding.
If you have multiple authentication providers enabled, and you want to automatically log in anonymous users when embedding dashboards or visualizations, then toggle `Public URL` switch presented in the embedding menu.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we mention the saved objects it applies to and which apps the menu item is available from?

Suggested change
If you have multiple authentication providers enabled, and you want to automatically log in anonymous users when embedding dashboards or visualizations, then toggle `Public URL` switch presented in the embedding menu.
If you have multiple authentication providers enabled, and you want to automatically log in anonymous users when embedding dashboards, visualizations, and saved searches, then toggle *Public URL* in the *Share > Embed code* menu in *Dashboard*, *Visualize*, or *Discover*.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If you have multiple authentication providers enabled, and you want to automatically log in anonymous users when embedding dashboards, visualizations, and saved searches, then toggle Public URL in the Share > Embed code menu in Dashboard, Visualize, or Discover.

Thanks, but will omit saved searches and Discover since we don't support embedding for them.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

++


For example, if you generate the iframe code to embed {kib}, it will look like this:
You can also use `Public URL` switch when you're generating permanent links to dashboards, visualizations or saved searches.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
You can also use `Public URL` switch when you're generating permanent links to dashboards, visualizations or saved searches.
You can also use the *Public URL* toggle when you're generating permanent links to dashboards, visualizations, and saved searches.

```

Note that `auth_provider_hint` query string parameter goes *before* the hash URL fragment.
NOTE: `Public URL` switch is only available if anonymous access is properly configured and anonymous service account has enough privileges to access what you want to embed or share.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
NOTE: `Public URL` switch is only available if anonymous access is properly configured and anonymous service account has enough privileges to access what you want to embed or share.
NOTE: The *Public URL* toggle is only available if anonymous access is properly configured and your anonymous service account has privileges to access what you want to embed or share.

@jportner jportner self-requested a review February 16, 2021 15:16
[[embedding]]
== Embedding {kib}

You can embed a {kib} dashboard or visualization using an HTML code snippet generated with the *Copy iFrame code* button in *Share > Embed code* menu in *Dashboard* or *Visualize*.

This comment was marked as resolved.


NOTE: Embedding of any other part of {kib} is also generally possible, but you may need to craft the proper HTML code manually.

[role="screenshot"]

This comment was marked as resolved.

[[embedding-security]]
=== Configure security

Embedding through iframes, if used properly, does not directly pose a security risk, but still requires a careful consideration.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is it worth explaining what some of these considerations are?

Copy link
Contributor

@jportner jportner Feb 17, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'll chime in here -- I think we should reword this. Nothing is zero-risk, and this statement could be misinterpreted. How about this?

Suggested change
Embedding through iframes, if used properly, does not directly pose a security risk, but still requires a careful consideration.
Embedding content through iframes requires careful consideration to minimize security risks. By default, modern web browsers enforce the
https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy[same-origin policy] to restrict the behavior of framed pages. When
{stack-security-features} are enabled on your cluster, you must relax this constraint for cookies as described below for {kib} to function
in an iframe. See https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe[iframe] and
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite[SameSite cookies] documentation for more information.

Note that we have a few links to MDN docs here, which there is precedent for in some other docs.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note that we have a few links to MDN docs here, which there is precedent for in some other docs.

MDN is the well-known and trusted source of such information, I assume it should be fine. @gchaps do you have any concerns?


[float]
==== Authentication
If you're embedding {kib} to the website that supports Single Sign-On with SAML, OpenID Connect, Kerberos or PKI it's highly advisable to configure {kib} as a part of this Single Sign-On setup as well. Operating within a single and properly configured security domain would provide you with the most secure and seamless user experience. You can read more at <<kibana-authentication, Authentication in {kib}>>.

This comment was marked as resolved.

==== Authentication
If you're embedding {kib} to the website that supports Single Sign-On with SAML, OpenID Connect, Kerberos or PKI it's highly advisable to configure {kib} as a part of this Single Sign-On setup as well. Operating within a single and properly configured security domain would provide you with the most secure and seamless user experience. You can read more at <<kibana-authentication, Authentication in {kib}>>.

If you want anyone to access embedded {kib} skipping the login step, but the Single Sign-On isn't an option for you, consider configuring the <<anonymous-authentication, anonymous access>> instead. It is already natively integrated into the embedding workflow for the dashboards and visualizations.

This comment was marked as resolved.

This comment was marked as resolved.

This comment was marked as resolved.

This comment was marked as resolved.


If you have multiple authentication providers enabled, and you want to automatically log in anonymous users when embedding anything other than dashboards and visualizations, then you will need to add the `auth_provider_hint=<anonymous-provider-name>` query string parameter to the {kib} URL that you're embedding.

For example, if you craft the iframe code to embed {kib}, it may look like this:

This comment was marked as resolved.

<iframe src="https://localhost:5601/app/monitoring?auth_provider_hint=anonymous1#/elasticsearch/nodes?embed=true&_g=(....)" height="600" width="800"></iframe>
```

Note that `auth_provider_hint` query string parameter goes *before* the hash URL fragment.

This comment was marked as resolved.

[float]
==== Cookies

Irrespective to the authentication type you're going to use for the embedded {kib} you need to make sure that browsers can transmit session cookies to a {kib} server. The setting you need to be aware of is <<xpack-security-sameSiteCookies, `xpack.security.sameSiteCookies`>>, and to support modern browsers, you might need to set it to `None`:

This comment was marked as resolved.

xpack.security.sameSiteCookies: "None"
--

You can find more information about possible values and implications <<xpack-security-sameSiteCookies, here>>.

This comment was marked as resolved.

[[embedding]]
== Embedding {kib}

You can embed a {kib} dashboard or visualization using an HTML code snippet generated with the *Copy iFrame code* button in *Share > Embed code* menu in *Dashboard* or *Visualize*.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It would be good to provide some information about why you would want to embed a Kibana dashboard or visualization. Can you also embed saved searches?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It would be good to provide some information about why you would want to embed a Kibana dashboard or visualization.

Sure, let me think how to phrase that properly.

Can you also embed saved searches?

Technically you can embed anything. You just create an iframe and put any Kibana URL there assuming it works for your use case and you don't mind the risk of breaking it in any release.

I'd say we want to encourage our users to embed only what we officially support and provide advanced sharing controls for. But we also know that some users will still embed Kibana in very surprising ways. These are the users we're targeting in the section with auth_provider_hint.

@azasypkin azasypkin added the auto-backport Deprecated - use backport:version if exact versions are needed label Feb 17, 2021
Copy link
Contributor

@jportner jportner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I like the content, but I had to read three different pages a few times before I really understood how to do this using the ES anonymous user ("Embedding Kibana", "Authentication in Kibana", "Enabling anonymous access"). The fact that there are several ways to configure anonymous authentication in Kibana (one of which requires ES to have anonymous access enabled too) is a bit overwhelming IMO. High level feedback:

"Authentication in Kibana"

I like this page as-is, it does a great job explaining the different options. This is a good example of "Reference" documentation IMO:

image

I can't comment on this inline because this part of the page hasn't been changed in this PR, but the only complaint I have is the part in the Anonymous Authentication section where it says "There are three ways to specify these credentials:". It really specifies four ways to configure anonymous authentication. Is there a better way we can organize that? Perhaps split it up with sub-headings with something like this?

  1. Anonymous authentication with a user account
    a. With username and password
    b. With an API key (base64-encoded id:api_key string)
    c. With an API key (id and api_key values)
  2. Anonymous authentication using Elasticsearch anonymous access

"Embedding Kibana"

I like this page, but as I alluded above, I was not able to easily figure out what to do by reading it. In the quad chart above, this reads like "Reference" documentation. I think we really need this page to be more of a "How-to Guide". If a user is coming to this page, they likely want to figure out exactly what to do to embed Kibana in a webpage. I'd prefer if we could outline all the steps to do so:

  1. Create a user account
  2. Create a role for this user account (assign it minimal privileges)
  3. Reconfigure Kibana to add an anonymous auth provider that utilizes this account
  4. Open a dashboard and get the embeddable iframe code

WDYT?

@gchaps
Copy link
Contributor

gchaps commented Feb 17, 2021

+1 for a how-to guide.

@azasypkin
Copy link
Member Author

These are all great ideas @jportner, thanks! I feel that the scope of this PR is significantly drifting away from the initial goal though. The goal was to recommend using Public URL switch instead of manually adding auth_provider_hint query string parameter when anonymous access is enabled and do some groundwork for the embedding docs so that authentication section can reference to it. But it sounds like my "better-some-docs-than-no-docs" plan didn't work out and sparse embedding section just adds more confusion.

I think I'll just stick to the initial plan and completely remove embedding section from this PR to unblock it and try to come up with a how-to guide for embedding in the near future. Does that sound good?

I'd prefer if we could outline all the steps to do so:

  1. Create a user account
  2. Create a role for this user account (assign it minimal privileges)
  3. Reconfigure Kibana to add an anonymous auth provider that utilizes this account
  4. Open a dashboard and get the embeddable iframe code

I believe we want to endorse using SSO for embedding as the easiest (no need to configure anonymous service account separately), the most flexible (different users may see different things) and the safest approach (less risk to give too much privileges to the anonymous service account in attempt to cater the needs of all user groups in a single account). I still see embedding with the anonymous access as the fallback when SSO isn't an option, a necessary evil if you will.

That's why I'd like the How-To guide to start from the praise to SSO approach and only then mention anonymous access with all the steps you suggested. I don't have the full picture of how that guide should look like in my head yet, so I'll make a step back and think a little bit more.

@jportner
Copy link
Contributor

I feel that the scope of this PR is significantly drifting away from the initial goal though.

Yeah, sorry about that!

I think I'll just stick to the initial plan and completely remove embedding section from this PR to unblock it and try to come up with a how-to guide for embedding in the near future. Does that sound good?

Honestly I think the embedding page has valuable content and we should keep it until we can reorganize/rewrite it in a How-To Guide style.

That's why I'd like the How-To guide to start from the praise to SSO approach and only then mention anonymous access with all the steps you suggested. I don't have the full picture of how that guide should look like in my head yet, so I'll make a step back and think a little bit more.

You make a good argument! I'd be happy to help write this up, let me know 😄

@azasypkin
Copy link
Member Author

Honestly I think the embedding page has valuable content and we should keep it until we can reorganize/rewrite it in a How-To Guide style.

Good, I'll keep it here then.

You make a good argument! I'd be happy to help write this up, let me know smile

Thanks! I'll create a draft PR once we are done with this one.


Once you create a dashboard, or a visualization you surely might want to share it with your colleagues or friends at some point. The easiest way to do that is to share a direct link to your dashboard or visualization, but not everyone might have access to your {kib} or even know what {kib} is. Moreover, sometimes you might want to give more context to the thing you're sharing, for example, attach analysis, or images, or links, and {kib} isn't always the best tool for this type of job.

If you have an internal company website or just a personal webpage where it'd make more sense to display the content you created in {kib}, then try out the {kib} embedding functionality. You can embed a {kib} dashboard or visualization using an HTML code snippet generated with the *Copy iFrame code* button in the *Share > Embed code* menu in *Dashboard* or *Visualize*.

This comment was marked as resolved.


Once you create a dashboard, or a visualization you surely might want to share it with your colleagues or friends at some point. The easiest way to do that is to share a direct link to your dashboard or visualization, but not everyone might have access to your {kib} or even know what {kib} is. Moreover, sometimes you might want to give more context to the thing you're sharing, for example, attach analysis, or images, or links, and {kib} isn't always the best tool for this type of job.

If you have an internal company website or just a personal webpage where it'd make more sense to display the content you created in {kib}, then try out the {kib} embedding functionality. You can embed a {kib} dashboard or visualization using an HTML code snippet generated with the *Copy iFrame code* button in the *Share > Embed code* menu in *Dashboard* or *Visualize*.

This comment was marked as resolved.


Once you create a dashboard, or a visualization you surely might want to share it with your colleagues or friends at some point. The easiest way to do that is to share a direct link to your dashboard or visualization, but not everyone might have access to your {kib} or even know what {kib} is. Moreover, sometimes you might want to give more context to the thing you're sharing, for example, attach analysis, or images, or links, and {kib} isn't always the best tool for this type of job.

If you have an internal company website or just a personal webpage where it'd make more sense to display the content you created in {kib}, then try out the {kib} embedding functionality. You can embed a {kib} dashboard or visualization using an HTML code snippet generated with the *Copy iFrame code* button in the *Share > Embed code* menu in *Dashboard* or *Visualize*.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I like the new content! Here is a suggestion that moves things around a bit and removed some of the things that felt a little negative. In the second para, I suggest leading with the Kibana embedding functionality and putting the instructions in the order that that users sees them. Also, the part about adding context felt more natural here.

Once you create a dashboard or a visualization, you might want to share it with your colleagues or friends. The easiest way to do this is to share a direct link to your dashboard or visualization. However, some users might not have access to your {kib}.

With the {kib} embedding functionality, you can display the content you created in {kib} to an internal company website or a personal web page. From Dashboard or Visualize, open the Share > Embed code menu, and then click Copy iFrame code to generate an HTML code snippet. You can embed in this snippet in your web page, and then add analysis, images, and links to give more context to the object you're sharing.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sounds much better, thanks!

@@ -0,0 +1,54 @@
[[embedding]]
== Embedding {kib}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Embedding {kib} content in a web page?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This page looks very useful! Why is it organized as part of setup instead of being part of dashboards?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Embedding {kib} content in a web page?

Yeah, sounds good, thanks.

This page looks very useful! Why is it organized as part of setup instead of being part of dashboards?

Basically setup was the only existing top-level section that can potentially cover all parts of Kibana. The idea was to eventually describe everything that can be embedded in one way or another: dashboards, visualizations, canvas, or any random part of Kibana that can technically be embedded (we know people do this).

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We are planning on creating a Share section in the documentation. Would this doc be a good candidate for that?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, I think so.


Embedding content through iframes requires careful consideration to minimize security risks. By default, modern web browsers enforce the
https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy[same-origin policy] to restrict the behavior of framed pages. When
{stack-security-features} are enabled on your cluster, you must relax this constraint for cookies as described below for {kib} to function

This comment was marked as resolved.


If you have an internal company website or just a personal webpage where it'd make more sense to display the content you created in {kib}, then try out the {kib} embedding functionality. You can embed a {kib} dashboard or visualization using an HTML code snippet generated with the *Copy iFrame code* button in the *Share > Embed code* menu in *Dashboard* or *Visualize*.

NOTE: Embedding of any other part of {kib} is also generally possible, but you may need to craft the proper HTML code manually.

This comment was marked as resolved.

Embedding content through iframes requires careful consideration to minimize security risks. By default, modern web browsers enforce the
https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy[same-origin policy] to restrict the behavior of framed pages. When
{stack-security-features} are enabled on your cluster, you must relax this constraint for cookies as described below for {kib} to function
in an iframe. See https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe[iframe] and

This comment was marked as resolved.

https://developer.mozilla.org/en-US/docs/Web/Security/Same-origin_policy[same-origin policy] to restrict the behavior of framed pages. When
{stack-security-features} are enabled on your cluster, you must relax this constraint for cookies as described below for {kib} to function
in an iframe. See https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe[iframe] and
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite[SameSite cookies] documentation for more information.

This comment was marked as resolved.

xpack.security.sameSiteCookies: "None"
--

For more information about possible values and implications, go to <<xpack-security-sameSiteCookies, xpack.security.sameSiteCookies >>.

This comment was marked as resolved.

@azasypkin azasypkin changed the title Simply anonymous access & embedding docs. Simplify anonymous access & embedding docs. Feb 19, 2021
@KOTungseth
Copy link
Contributor

Does this PR cover #18226?

@jportner
Copy link
Contributor

Does this PR cover #18226?

@KOTungseth No, but as mentioned in #90409 (comment) we are planning on making a How-To guide that would focus on the SSO (external auth provider) use case. We'll open a new PR and link it to that issue, thanks!

Copy link
Contributor

@gchaps gchaps left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM


image::images/embed-kibana.png[Generate an HTML snippet to embed {kib}, align=center]

NOTE: Embedding of any other part of {kib} is also generally possible, but you may need to craft the proper HTML code manually.

This comment was marked as resolved.

@@ -1,23 +1,23 @@
[[embedding]]
== Embedding {kib}
== Embedding {kib} content in a web page
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
== Embedding {kib} content in a web page
== Embed {kib} content in a web page

@azasypkin azasypkin requested a review from jportner February 22, 2021 17:03
Copy link
Contributor

@jportner jportner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎉

@azasypkin azasypkin merged commit 8e2bd8f into elastic:master Feb 23, 2021
@azasypkin azasypkin deleted the issue-xxx-simplify-anonymous-docs branch February 23, 2021 07:56
@azasypkin
Copy link
Member Author

Thanks a lot for review @gchaps @jportner @legrego !

@kibanamachine
Copy link
Contributor

💚 Backport successful

7.11 / #92352
7.12 / #92353

Successful backport PRs will be merged automatically after passing CI.

kibanamachine added a commit that referenced this pull request Feb 23, 2021
Co-authored-by: Aleh Zasypkin <aleh.zasypkin@gmail.com>
kibanamachine added a commit that referenced this pull request Feb 23, 2021
Co-authored-by: Aleh Zasypkin <aleh.zasypkin@gmail.com>
@jportner
Copy link
Contributor

It looks like we backported these docs to 7.11, even though the Public URL switch (from the linked PR) is only available in 7.12+ 🙈

I'll push a PR to update the 7.11 docs accordingly.

@azasypkin
Copy link
Member Author

Ugh, thanks @jportner for catching this!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-backport Deprecated - use backport:version if exact versions are needed docs Feature:Security/Authentication Platform Security - Authentication release_note:skip Skip the PR/issue when compiling release notes Team:Docs Team:Security Team focused on: Auth, Users, Roles, Spaces, Audit Logging, and more! v7.11.0 v7.12.0 v7.13.0 v8.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants