@agentconnect.md/setup 2.11.0-rc.8 → 2.12.0-rc.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -32,6 +32,15 @@ Google is the shortest local sign-in path because its Web OAuth client accepts
32
32
  the bundled bare `localhost` origins. Slack remains disabled until every
33
33
  required public service URL uses HTTPS.
34
34
 
35
+ An organization that signs in through its own identity provider can choose
36
+ **Single sign-on (OIDC or SAML)** instead of a social provider. Setup first asks
37
+ Logto to create the connector and shows the redirect URI (OIDC) or the ACS URL
38
+ and SP entity ID (SAML) to register with the identity provider; the provider's
39
+ issuer and client, or its SAML metadata, come next, together with at least one
40
+ email domain: Logto offers no sign-in through a connector without one. An
41
+ identity provider on a private network also needs its address in
42
+ `LOGTO_SSRF_ALLOWED_ADDRESSES`.
43
+
35
44
  ## Run from source
36
45
 
37
46
  Start the database and optional Logto services, then run the server directly: