checkId: check.authority.plugin.configured plugin: stellaops.doctor.authority severity: fail tags: [authority, authentication, configuration, security]

Authority Plugin Configuration

This Doctor check verifies that at least one Authority authentication plugin (Standard, LDAP, OIDC, or SAML) is configured, because without one no user can authenticate to Stella Ops. It is a fast, local configuration check aimed at operators bringing up or troubleshooting Authority; for backend reachability see check.authority.plugin.connectivity.

What It Checks

Reads the Authority:Plugins configuration and counts the enabled/declared plugins:

It fails when zero plugins are configured, warns when a plugin is enabled with incomplete settings, and passes when at least one plugin is fully configured.

Why It Matters

Authority is the single sign-on gateway for the platform. If no authentication plugin is configured, the Authority service starts but rejects every login attempt, locking operators out of the Console, CLI, and every gated workflow (releases, approvals, exports).

Common Causes

How to Fix

Docker Compose

environment:
  Authority__Plugins__Standard__Enabled: "true"

Bare Metal / systemd

Edit /etc/stellaops/appsettings.json:

{
  "Authority": {
    "Plugins": {
      "Standard": { "Enabled": true }
    }
  }
}

Or run the setup wizard:

stella setup --step authority

Kubernetes / Helm

authority:
  plugins:
    standard:
      enabled: true

Verification

stella doctor run --check check.authority.plugin.configured