Misha Bragin 3a0cf230a1 Disable local users for a smooth single-idp mode (#5226) ...

Add LocalAuthDisabled option to embedded IdP configuration

This adds the ability to disable local (email/password) authentication when using the embedded Dex identity provider. When disabled, users can only authenticate via external
identity providers (Google, OIDC, etc.).

This simplifies user login when there is only one external IdP configured. The login page will redirect directly to the IdP login page.

Key changes:

Added LocalAuthDisabled field to EmbeddedIdPConfig
Added methods to check and toggle local auth: IsLocalAuthEnabled, HasNonLocalConnectors, DisableLocalAuth, EnableLocalAuth
Validation prevents disabling local auth if no external connectors are configured
Existing local users are preserved when disabled and can login again when re-enabled
Operations are idempotent (disabling already disabled is a no-op)

2026-02-01 14:26:22 +01:00

..

dex

Disable local users for a smooth single-idp mode (#5226)

2026-02-01 14:26:22 +01:00

sdk

[management, infrastructure, idp] Simplified IdP Management - Embedded IdP (#5008)

2026-01-07 14:52:32 +01:00