From dc26e0a5597b7a9b16bb67f7d9f20b385c5cd3bd Mon Sep 17 00:00:00 2001 From: Alan Parra Date: Tue, 30 Jul 2024 18:28:59 -0300 Subject: [PATCH] Add SSO users to the device trust web testplan --- .github/ISSUE_TEMPLATE/testplan.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/ISSUE_TEMPLATE/testplan.md b/.github/ISSUE_TEMPLATE/testplan.md index 5a0ecf90989f3..7f3618e6e931f 100644 --- a/.github/ISSUE_TEMPLATE/testplan.md +++ b/.github/ISSUE_TEMPLATE/testplan.md @@ -698,11 +698,16 @@ tsh ssh node-that-requires-device-trust - [ ] SSH - [ ] App Access - [ ] Desktop Access + - [ ] GitHub user + - [ ] OIDC user + - [ ] SAML user Confirm that it works by failing first. Most protocols can be tested using device_trust.mode="required". App Access and Desktop Access require a custom role (see [enforcing device trust](https://goteleport.com/docs/access-controls/device-trust/enforcing-device-trust/#app-access-support)). + For SSO users confirm that device web authentication happens successfully. + - [ ] Device authorization - [ ] device_trust.mode other than "off" or "" not allowed (OSS) - [ ] device_trust.mode="off" doesn't impede access (Enterprise and OSS)