diff --git a/website/content/docs/concepts/credential-management.mdx b/website/content/docs/concepts/credential-management.mdx index a35dfb6c43..ebdf0b8a7a 100644 --- a/website/content/docs/concepts/credential-management.mdx +++ b/website/content/docs/concepts/credential-management.mdx @@ -99,7 +99,10 @@ Credential injection is required for the SSH target type, allowing users to inje - Usernames and passwords - Usernames and public keys -Additional credentials can be brokered to SSH targets after the session is establised using injected credentials. +Keyboard-interactive authentication is not supported for credential injection. +When you use Username password credentials, ensure that your SSH server is configured to allow password authentication. + +You can broker additional credentials to SSH targets after the session is established using injected credentials. ### Security considerations diff --git a/website/content/docs/configuration/credential-management/configure-credential-injection.mdx b/website/content/docs/configuration/credential-management/configure-credential-injection.mdx index 70bbdeb22f..d7e2f65612 100644 --- a/website/content/docs/configuration/credential-management/configure-credential-injection.mdx +++ b/website/content/docs/configuration/credential-management/configure-credential-injection.mdx @@ -24,6 +24,8 @@ Credential injection provides end users with a passwordless experience when they - You must have a static credential saved in your static credential store or Vault credential store. The credential must correspond to the target to which you want to authenticate. +- Keyboard-interactive authentication is not supported. When you use Username password credentials, ensure that your SSH server is configured to allow password authentication. + ## Configuration Complete the following steps to configure targets with credential injection: @@ -79,4 +81,5 @@ Refer to the following topics for more information: - [Create static credential stores](/boundary/docs/configuration/credential-management/static-cred-boundary) - [Create Vault credential stores](/boundary/docs/configuration/credential-management/static-cred-vault) -- [Target types](/boundary/docs/concepts/domain-model/targets#target-types) \ No newline at end of file +- [Target types](/boundary/docs/concepts/domain-model/targets#target-types) +- [Credentials](/boundary/docs/concepts/domain-model/credentials) \ No newline at end of file