feat: deployment flag to auto handle changed oidc providers (#26419)

An opt-out flag exists as an escape hatch

closes https://linear.app/codercom/issue/PLAT-343/automatically-reset-user-link-for-affected-users-when-idp-provider
This commit is contained in:
Steven Masley
2026-06-16 13:26:04 -07:00
committed by GitHub
parent b6fcb9a30a
commit 0e45ded0ed
9 changed files with 286 additions and 23 deletions
+6
View File
@@ -428,6 +428,12 @@ oidc:
# setting can also break OIDC, so use with caution.
# (default: <unset>, type: url)
oidc-redirect-url:
# OIDC based users require the IdP issuer and subject in the claims to be static.
# If a new provider is configured, this option is required to be 'true'. It will
# reset any existing users to the previous provider, and match by email on their
# next login.
# (default: true, type: bool)
oidc-repair-links: true
# Telemetry is critical to our ability to improve Coder. We strip all personal
# information before sending data to our servers. Please only disable telemetry
# when required by your organization's security policy.