Skip to content

Commit 82e816f

Browse files
authored
Remove GitHub team ID and JWT decoding instructions
Removed instructions for finding GitHub team IDs and decoding JWT tokens.
1 parent 73b77ff commit 82e816f

1 file changed

Lines changed: 0 additions & 21 deletions

File tree

docs/howtos/operations/configuring_rancher_sso.md

Lines changed: 0 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -114,18 +114,6 @@ rolesMapping:
114114
- "admin"
115115
```
116116

117-
### Finding your GitHub team IDs
118-
119-
You can look up numeric team IDs via the GitHub API:
120-
121-
```bash
122-
# List teams and their IDs for an org
123-
curl -H "Authorization: token <your-github-pat>" \
124-
https://api.github.com/orgs/<your-org>/teams
125-
```
126-
127-
Each team object includes an `id` field — use that value after the `github_team://` prefix in your `rolesMapping`.
128-
129117
## Step 4: Apply and Restart
130118

131119
After updating the `dex-config` secret, restart the Dex workload so it picks up the new configuration:
@@ -148,15 +136,6 @@ This should redirect you through Dex to the Rancher login page (which in turn ma
148136

149137
**Groups claim is empty:** Confirm `insecureEnableGroups: true` is set in the connector config. Also verify the user actually belongs to a team/group in the upstream IdP — org-level membership alone may not populate groups.
150138

151-
**User identity not recognized:** Check which claim Rancher returns for user identification. Inspect the token with:
152-
153-
```bash
154-
# Decode a JWT token payload
155-
echo '<token>' | cut -d. -f2 | base64 -d 2>/dev/null | python3 -m json.tool
156-
```
157-
158-
If the `email` field is empty but `name` is populated, add `claimMapping.email: name` to the connector config.
159-
160139
**Numeric group IDs don't match:** Use the GitHub API to confirm the team ID. Rancher uses the numeric `id`, not the `slug` or display name.
161140

162141
## Related Documentation

0 commit comments

Comments
 (0)