coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Send a direct Authelia sign-in to the account site.

Browse source 
A visit to the sign-in portal with no follow-up now continues to
https://users.coulomb.social. A provided follow-up still wins. The
success screen cannot carry a custom link.

Assistant: grok
Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f
This commit is contained in:
tegwick 2026-09-26 22:07:44 +02:00
parent 6ca8fda275
commit a2e2c5b1d0
2 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
sso-mfa/k8s/authelia/README.md
View file

@ -46,6 +46,8 @@ Key config points:
- `identity_providers.oidc.clients[0].redirect_uris` — must match CP-NK-004 (`kc.coulomb.social`)
- `session.domain` — set to parent domain `coulomb.social` so cookies are valid across
both `auth.coulomb.social` and `kc.coulomb.social`
- `default_redirection_url` — `https://users.coulomb.social` when the visitor
opened the portal with no follow-up. A provided `rd` still wins
- `access_control.default_policy: one_factor` — fleet default; MFA is not Authelia’s job
- `access_control.rules` — domain allowlists by LLDAP group (see below)