Description of problem: Admin needs to change the setting oidc_audience value each time a user uses different client id. Version-Release number of selected component (if applicable): Steps to Reproduce: 1. Create 2 clients on RHSSO, one for hammer and other for Satellite 2. Try to login from both the platforms Actual results: Admin is being able to provide just one audiance right now. Expected results: Admin must be able to provide all the client ids involved inside Satellite settings.
Upstream bug assigned to rabajaj
Moving this bug to POST for triage into Satellite 6 since the upstream issue https://projects.theforeman.org/issues/29386 has been resolved.
'oidc_audience' settings now contain the list, after applying both audiences specific to UI and Hammer, I was able to login using the hammer (two factors) mentioned steps are here https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/administering_red_hat_satellite/chap-red_hat_satellite-administering_red_hat_satellite-configuring_external_authentication#integrating-satellite-with-red-hat-single-sign-on-for-external-authentication. Verified with Satellite 6.8 Snap1.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: Satellite 6.8 release), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2020:4366