From 993ab8a807757869cfd861bdb0a69fb655758b38 Mon Sep 17 00:00:00 2001 From: hc-github-team-secure-vault-core <82990506+hc-github-team-secure-vault-core@users.noreply.github.com> Date: Fri, 1 Apr 2022 20:08:40 -0400 Subject: [PATCH] docs: add known issue to 1.10 release notes (#14861) Co-authored-by: Austin Gebauer --- website/content/docs/release-notes/1.10.mdx | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/website/content/docs/release-notes/1.10.mdx b/website/content/docs/release-notes/1.10.mdx index 103af1fc10dc..6f887e19ce9a 100644 --- a/website/content/docs/release-notes/1.10.mdx +++ b/website/content/docs/release-notes/1.10.mdx @@ -150,6 +150,17 @@ When a user has a policy that allows creating a secret engine but not reading it When adding or modifying a Duo MFA method for step-up Enterprise MFA using the `sys/mfa/method/duo` endpoint, a panic gets triggered due to a missing schema field. We will have a fix for this in Vault 1.10.1. Until this issue is fixed, avoid making any changes to your Duo configuration if you are upgrading Vault to v1.10.0. +### Sign in to UI using OIDC auth method results in an error + +Signing in to the Vault UI using an OIDC auth mount listed in the "tabs" of the form will result +in the following error: "Authentication failed: role with oidc role_type is not allowed". +The auth mounts listed in the "tabs" of the form are those that have [listing_visibility](/api-docs/system/auth#listing_visibility-1) +set to `unauth`. + +There is a workaround for this error that will allow you to sign in to Vault using the OIDC +auth method. Select the "Other" tab instead of selecting the specific OIDC auth mount tab. +From there, select "OIDC" from the "Method" select box and proceed to sign in to Vault. + ## Feature Deprecations and EOL Please refer to the [Deprecation Plans and Notice](/docs/deprecation) page for up-to-date information on feature deprecations and plans. An [Feature Deprecation FAQ](/deprecation/faq) page is also available to address questions concerning decisions made about Vault feature deprecations.