From 6a4d34fba90ede0a9d600daa24a8d95190a42495 Mon Sep 17 00:00:00 2001
From: Carla Martinez <carlmart@redhat.com>
Date: Mar 03 2023 03:55:48 +0000
Subject: Update 'Auth indicators' doc string


The doc string located in the 'Authentication
indicators' ('Services' settings page) was
missing the usage explanation for the 'ipd'
checkbox option.

Fixes: https://pagure.io/freeipa/issue/9338
Signed-off-by: Carla Martinez <carlmart@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>

---

diff --git a/ipaserver/plugins/service.py b/ipaserver/plugins/service.py
index b4fe542..26a7950 100644
--- a/ipaserver/plugins/service.py
+++ b/ipaserver/plugins/service.py
@@ -574,6 +574,9 @@ class service(LDAPObject):
                   " Use 'pkinit' to allow PKINIT-based 2FA authentications."
                   " Use 'hardened' to allow brute-force hardened password"
                   " authentication by SPAKE or FAST."
+                  " Use 'idp' to allow authentication against an external"
+                  " Identity Provider supporting OAuth 2.0 Device"
+                  " Authorization Flow (RFC 8628)."
                   " With no indicator specified,"
                   " all authentication mechanisms are allowed."),
             values=(u'radius', u'otp', u'pkinit', u'hardened', u'idp'),