From 014ece40ce9987495fec80e95a26e7ed39e6bdb4 Mon Sep 17 00:00:00 2001 From: "Dr. Ernie Prabhakar" Date: Fri, 13 Mar 2026 17:02:51 -0700 Subject: [PATCH 1/2] docs(sso): note that auth params are Terraform/multi_sso format only CloudFormation Console and Marketplace deployments use a different parameter set (SingleSignOnProvider dropdown). Add clarifying notes with cross-links to the technical reference. Co-Authored-By: Claude Sonnet 4.6 --- EXAMPLES.md | 7 +++++++ VARIABLES.md | 5 +++++ 2 files changed, 12 insertions(+) diff --git a/EXAMPLES.md b/EXAMPLES.md index 32f64f0..76718ad 100644 --- a/EXAMPLES.md +++ b/EXAMPLES.md @@ -320,6 +320,13 @@ module "quilt" { ## Authentication Examples +> **Note:** These examples use the Terraform IAC module, which supports per-provider parameters +> (`GoogleAuth`, `AzureAuth`, etc.) and multiple simultaneous providers. If your stack was deployed +> via the CloudFormation Console or AWS Marketplace, see the +> [SSO configuration in the technical reference](https://docs.quiltdata.com/technical-reference#enabling-sso) +> — those deployments use `SingleSignOnProvider`, `SingleSignOnClientId`, `SingleSignOnClientSecret`, +> and `SingleSignOnBaseUrl` instead. + ### Google OAuth Integration ```hcl diff --git a/VARIABLES.md b/VARIABLES.md index 00b2aa1..4189bf3 100644 --- a/VARIABLES.md +++ b/VARIABLES.md @@ -77,6 +77,11 @@ The `parameters` map configures the Quilt application. Here are all available pa ### Authentication Parameters +> **Note:** These parameters apply to Terraform IAC module deployments (`multi_sso: true`). +> CloudFormation Console and AWS Marketplace deployments use a different set: +> `SingleSignOnProvider`, `SingleSignOnClientId`, `SingleSignOnClientSecret`, and `SingleSignOnBaseUrl`. +> See the [SSO configuration in the technical reference](https://docs.quiltdata.com/technical-reference#enabling-sso). + | Parameter | Description | Values | Default | |-----------|-------------|--------|---------| | `PasswordAuth` | Enable username/password authentication | `"Enabled"`, `"Disabled"` | `"Enabled"` | From 09479dd15379caa12a0abdc4f067acb0075f718e Mon Sep 17 00:00:00 2001 From: "Dr. Ernie Prabhakar" Date: Mon, 16 Mar 2026 09:02:45 -0700 Subject: [PATCH 2/2] docs(sso): fix false claim that deployment method determines SSO parameter format MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The per-provider params (GoogleAuth, AzureAuth, etc.) apply to stacks built with multi_sso: true — not specifically to Terraform deployments. A TF-deployed stack with multi_sso: false still uses the SingleSignOn* params. Reframe both notes around the multi_sso build flag and add a practical check (look for the SingleSignOnProvider dropdown) so users can self-diagnose. Co-Authored-By: Claude Sonnet 4.6 --- EXAMPLES.md | 10 +++++----- VARIABLES.md | 6 ++++-- 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/EXAMPLES.md b/EXAMPLES.md index 76718ad..e6ada6b 100644 --- a/EXAMPLES.md +++ b/EXAMPLES.md @@ -320,12 +320,12 @@ module "quilt" { ## Authentication Examples -> **Note:** These examples use the Terraform IAC module, which supports per-provider parameters -> (`GoogleAuth`, `AzureAuth`, etc.) and multiple simultaneous providers. If your stack was deployed -> via the CloudFormation Console or AWS Marketplace, see the +> **Note:** These examples use per-provider parameters (`GoogleAuth`, `AzureAuth`, etc.), which +> apply to stacks built with `multi_sso: true`. If your stack has a `SingleSignOnProvider` dropdown +> in its CloudFormation parameters, it was built with `multi_sso: false` and uses a different set of +> parameters — see the > [SSO configuration in the technical reference](https://docs.quiltdata.com/technical-reference#enabling-sso) -> — those deployments use `SingleSignOnProvider`, `SingleSignOnClientId`, `SingleSignOnClientSecret`, -> and `SingleSignOnBaseUrl` instead. +> instead. The deployment method (Terraform, Console, CLI) does not determine which format applies. ### Google OAuth Integration diff --git a/VARIABLES.md b/VARIABLES.md index 4189bf3..0ea262d 100644 --- a/VARIABLES.md +++ b/VARIABLES.md @@ -77,9 +77,11 @@ The `parameters` map configures the Quilt application. Here are all available pa ### Authentication Parameters -> **Note:** These parameters apply to Terraform IAC module deployments (`multi_sso: true`). -> CloudFormation Console and AWS Marketplace deployments use a different set: +> **Note:** These parameters apply to stacks built with `multi_sso: true` (per-provider format). +> Stacks built with `multi_sso: false` use a different set: > `SingleSignOnProvider`, `SingleSignOnClientId`, `SingleSignOnClientSecret`, and `SingleSignOnBaseUrl`. +> To determine which format your stack uses, check your stack's CloudFormation parameters for a +> `SingleSignOnProvider` dropdown — if present, use those parameters instead. > See the [SSO configuration in the technical reference](https://docs.quiltdata.com/technical-reference#enabling-sso). | Parameter | Description | Values | Default |