-
Type:
Task
-
Resolution: Works as Designed
-
Priority:
Major - P3
-
None
-
Affects Version/s: 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.12, 7.0.13, 7.0.14, 7.0.15, 7.0.16
-
Component/s: None
-
None
-
Server Security
-
None
-
3
-
None
-
None
-
None
-
None
-
None
-
None
On 7.0, the server only allows supportsHumanFlows and useAuthorizationClaim to be set to false (default is true) if FCV > 6.0. All other fields in every identity provider config in oidcIdentityProviders is permissible on either FCV 6.0 or 7.0. This has caused problems in Atlas when upgrading clusters since OIDC is configured at a project level, which means that different configs cannot be supplied to different clusters.
We should remove the FCV check for those two fields so that we can be consistently FCV-agnostic for all OIDC config fields.