auth

Author: mletalie

modules/rosa-configure.adoc

@@ -10,8 +10,50 @@ Use the following commands to configure the {product-title} (ROSA) CLI, `rosa`.
 
 [id="rosa-login_{context}"]
 == login
+There are several methods you can use to log into your Red{nbsp}Hat account using the {product-title} (ROSA) CLI (`rosa`).These methods are described in detail below.
 
-Log in to your Red{nbsp}Hat account, saving the credentials to the `rosa` configuration file. You must provide a token when logging in. You can copy your token from link:https://console.redhat.com/openshift/token/rosa[the ROSA token page].
+[IMPORTANT]
+====
+Red{nbsp}Hat recommends using the single sign-on method when logging into your account with the ROSA CLI (`rosa`). This method is more secure than logging in with an offline token.
+====
+
+
+[id="rosa-login-sso_{context}"]
+=== login with single sign-on (SSO) authorization code
+If your system supports a web-based browser, you can log in to the ROSA CLI (`rosa`) with a Red{nbsp}Hat single sign-on (SSO) authorization code.
+
+. To log into the ROSA CLI (`rosa`) with a Red{nbsp}Hat single sign-on authorization code, run the following command:
+
++
+[source,terminal]
+----
+$ rosa login --use-auth-code
+----
++
+Running this command will redirect you to the Red Hat SSO login.
++
+To switch accounts, logout from link:https://sso.redhat.com[https://sso.redhat.com] and run the command `$ rosa logout` before attempting to login again.
+
+[id="rosa-login-sso-device_{context}"]
+=== login with a single sign-on device code
+If you are working with containers, remote hosts, and other environments without a web browser, you can use a Red Hat single sign-on (SSO) device code for secure authentication. To do this, you use second device that has have a web browser to approve the login.
+
+. To log in to ROSA CLI (`rosa`) with a Red Hat single sign-on device code, run the following command:
+
++
+[source,terminal]
+----
+$ rosa login --use-device-code
+----
+Running this command will redirect you to the Red Hat SSO login and provide a log in code.
+
+To switch accounts, logout from link:https://sso.redhat.com[https://sso.redhat.com] and run `rosa logout` before attempting to login again.
+
+
+[id="rosa-login-token_{context}"]
+=== login with an offline token
+
+Log in to your Red{nbsp}Hat account, saving the credentials to the `rosa` configuration file. You can copy your token from link:https://console.redhat.com/openshift/token/rosa[the ROSA token page].
 
 The ROSA CLI (`rosa`) looks for a token in the following priority order: