Documentation is missing for `tsh login --callback` and `client_redirect_settings`

[webvictim]

Applies To

• https://goteleport.com/docs/reference/cli/tsh/#tsh-login
• https://goteleport.com/docs/access-controls/sso

Details

A PR was implemented which adds useful callback functionality to tsh login, but nothing tells customers how to use it:

• https://github.com/gravitational/teleport/pull/35457

There was also a subsequent security fix to add regex whitelisting for approved callback URLs:

• https://github.com/gravitational/teleport/pull/41833

Neither of these PRs was documented, so customers have a hard time discovering this useful functionality.

How will we know this is resolved?

Documentation will exist for these features.

Related Issues

None currently.

[webvictim]

This may be covered by https://goteleport.com/docs/admin-guides/access-controls/sso/sso/#changing-callback-address now.