From bb276a0dbafc5cf35326e195b9fa740a9170cf99 Mon Sep 17 00:00:00 2001 From: x032205 Date: Sat, 24 May 2025 01:25:49 -0400 Subject: [PATCH] review fixes --- docs/documentation/platform/sso/overview.mdx | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/documentation/platform/sso/overview.mdx b/docs/documentation/platform/sso/overview.mdx index 53cb5dd4e..ee284063c 100644 --- a/docs/documentation/platform/sso/overview.mdx +++ b/docs/documentation/platform/sso/overview.mdx @@ -39,14 +39,14 @@ If your required identity provider is not shown in the list above, please reach For enhanced security, Infisical enforces PKCE (Proof Key for Code Exchange) with the OAuth 2.0-based SSO providers and OIDC. This provides additional protection against authorization code interception attacks and strengthens your authentication flow security. -## Admin Login Portal +## SSO Break Glass -Organization Admins can utilize the Admin Login Portal to bypass SSO enforcement in case of an emergency. +In the event your SSO provider experiences downtime, and you need to access Infisical, Organization Admins can utilize the Admin Login Portal to bypass SSO enforcement. This portal is accessible at `/login/admin` (e.g., https://app.infisical.com/login/admin). - This bypass functionality is exclusively available to **Organization Admins**. **Server Admins** are not permitted to use this feature. + To bypass SSO for an organization, you must be an **Organization Admin** for that specific organization. This **Organization Admin** role is independent of **Server Admin** status. Being a **Server Admin** alone does not grant permission to use this bypass feature. ## FAQ @@ -63,6 +63,6 @@ This portal is accessible at `/login/admin` (e.g., https://app.infisical.com/log you can configure this behavior in the Server Admin Console. - You are likely being redirected because you're not using your username and password, or you're not an **Organization Admin**. This portal requires **Organization Admin** status and direct credential login (username and password). **Server Admin** status alone is insufficient. + You are likely being redirected because you're not using your email and password, or you're not an **Organization Admin**. This portal requires **Organization Admin** status and direct credential login (email and password). **Server Admin** status alone is insufficient.