Update environment variable documentation for SSO

Clarify the conditions for disabling password authentication in SSO environments.
This commit is contained in:
Classic298
2025-11-10 09:06:49 +01:00
committed by GitHub
parent b10c5024ef
commit 1db46642cd

View File

@@ -87,7 +87,6 @@ Failure to set WEBUI_URL before using OAuth/SSO will result in failure to log in
- Type: `bool`
- Default: `True`
- Description: Allows both password and SSO authentication methods to coexist when set to True. When set to False, **while SSO is enabled (`ENABLE_OAUTH_SIGNUP`=True)**, it disables all password-based login attempts on the /signin and /ldap endpoints, enforcing strict SSO-only authentication. Disable this setting in production environments with fully configured SSO to prevent credential-based account takeover attacks; keep it enabled if you require password authentication as a backup or have not yet completed SSO configuration. Should never be disabled if OAUTH/SSO is not being used.
- Persistence: This environment variable is a `PersistentConfig` variable.
:::danger