From a66006c8a639491ecd13aca6f0357c7cd69d5978 Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Wed, 25 Oct 2023 09:04:23 -0400
Subject: [PATCH] minor updates

---
 salt/kratos/map.jinja       | 2 +-
 salt/kratos/soc_kratos.yaml | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/salt/kratos/map.jinja b/salt/kratos/map.jinja
index 6d1e2917c..a2477098d 100644
--- a/salt/kratos/map.jinja
+++ b/salt/kratos/map.jinja
@@ -21,6 +21,6 @@
 
 {% set KRATOSMERGED = salt['pillar.get']('kratos', default=KRATOSDEFAULTS.kratos, merge=true) %}
 
-{% if KRATOSMERGED.oidc.enabled and 'oidc' in salt['pillar.get']('licensed_features') %}
+{% if KRATOSMERGED.oidc.enabled and 'oidc' in salt['pillar.get']('features') %}
 {%   do KRATOSMERGED.config.selfservice.methods.update({'oidc': {'enabled': true, 'config': {'providers': [KRATOSMERGED.oidc.config]}}}) %}
 {% endif %}
\ No newline at end of file
diff --git a/salt/kratos/soc_kratos.yaml b/salt/kratos/soc_kratos.yaml
index 0ac2fcd44..6285bf1ad 100644
--- a/salt/kratos/soc_kratos.yaml
+++ b/salt/kratos/soc_kratos.yaml
@@ -103,10 +103,10 @@ kratos:
       methods:
         password:
           enabled: 
-            description: Set to True to enable traditional password authentication to SOC. Typically set to true, except when exclusively using OIDC authentication. 
+            description: Set to True to enable traditional password authentication to SOC. Typically set to true, except when exclusively using OIDC authentication. Some external tool interfaces may not be accessible if local password authentication is disabled.
             global: True
             advanced: True
-            helpLink: kratos.html
+            helpLink: oidc.html
           config:
             haveibeenpwned_enabled:
               description: Set to True to check if a newly chosen password has ever been found in a published list of previously-compromised passwords. Requires outbound Internet connectivity when enabled.