open-metadata · pmbrull · Feb 21, 2024 · Feb 21, 2024 · Feb 21, 2024 · Feb 21, 2024
diff --git a/...metadata-docs/content/partials/v1.1/deployment/upgrade/upgrade-prerequisites.md b/...metadata-docs/content/partials/v1.1/deployment/upgrade/upgrade-prerequisites.md
@@ -127,8 +127,6 @@ global:
     containerRequestFilter: "org.openmetadata.service.security.JwtFilter"
     initialAdmins:
       - "user1"
-    botPrincipals:
-      - "<service_application_client_id>"
     principalDomain: "open-metadata.org"
   authentication:
     provider: "google"
@@ -150,9 +148,6 @@ openmetadata:
       containerRequestFilter: "org.openmetadata.service.security.JwtFilter"
       initialAdmins:
         - "user1"
-        - "user2"
-      botPrincipals:
-        - "<service_application_client_id>"
       principalDomain: "open-metadata.org"
     authentication:
       provider: "google"

diff --git a/openmetadata-docs/content/v1.1.x/deployment/security/google/kubernetes.md b/openmetadata-docs/content/v1.1.x/deployment/security/google/kubernetes.md
@@ -20,8 +20,6 @@ openmetadata:
       initialAdmins:
         - "user1"
         - "user2"
-      botPrincipals:
-        - "<service_application_client_id>"
       principalDomain: "open-metadata.org"
     authentication:
       provider: "google"

diff --git a/openmetadata-docs/content/v1.1.x/deployment/upgrade/kubernetes.md b/openmetadata-docs/content/v1.1.x/deployment/upgrade/kubernetes.md
@@ -133,8 +133,6 @@ global:
     containerRequestFilter: "org.openmetadata.service.security.JwtFilter"
     initialAdmins:
       - "user1"
-    botPrincipals:
-      - "<service_application_client_id>"
     principalDomain: "open-metadata.org"
   authentication:
     provider: "google"
@@ -156,9 +154,6 @@ openmetadata:
       containerRequestFilter: "org.openmetadata.service.security.JwtFilter"
       initialAdmins:
         - "user1"
-        - "user2"
-      botPrincipals:
-        - "<service_application_client_id>"
       principalDomain: "open-metadata.org"
     authentication:
       provider: "google"

diff --git a/openmetadata-docs/content/v1.1.x/deployment/upgrade/versions/100-to-110.md b/openmetadata-docs/content/v1.1.x/deployment/upgrade/versions/100-to-110.md
@@ -54,9 +54,6 @@ openmetadata:
       containerRequestFilter: "org.openmetadata.service.security.JwtFilter"
       initialAdmins:
         - "user1"
-        - "user2"
-      botPrincipals:
-        - "<service_application_client_id>"
       principalDomain: "open-metadata.org"
     authentication:
       provider: "google"

diff --git a/...tadata-docs/content/v1.2.x/deployment/security/amazon-cognito-sso/bare-metal.md b/...tadata-docs/content/v1.2.x/deployment/security/amazon-cognito-sso/bare-metal.md
@@ -16,7 +16,7 @@ authenticationConfiguration:
   provider: "aws-cognito"
   publicKeyUrls:
     - "https://cognito-idp.us-west-1.amazonaws.com/{User Pool ID}/.well-known/jwks.json"
-    - "http://{your domain}:8585/api/v1/system/config/jwks"
+    - "{your domain}/api/v1/system/config/jwks"
   authority: "https://cognito-idp.us-west-1.amazonaws.com/{User Pool ID}"
   clientId: "{Client ID}"
   callbackUrl: "http://localhost:8585/callback"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/amazon-cognito-sso/docker.md b/openmetadata-docs/content/v1.2.x/deployment/security/amazon-cognito-sso/docker.md
@@ -20,7 +20,7 @@ AUTHORIZER_ADMIN_PRINCIPALS=[admin]  # Your `name` from name@domain.com
 AUTHORIZER_PRINCIPAL_DOMAIN=open-metadata.org # Update with your domain
 
 AUTHENTICATION_PROVIDER=aws-cognito
-AUTHENTICATION_PUBLIC_KEYS=[{Cognito Domain}/{User Pool ID}/.well-known/jwks.json,  http://{your domain}:8585/api/v1/system/config/jwks] # Update with your Cognito Domain and User Pool ID
+AUTHENTICATION_PUBLIC_KEYS=[{Cognito Domain}/{User Pool ID}/.well-known/jwks.json,  {your domain}/api/v1/system/config/jwks] # Update with your Cognito Domain and User Pool ID
 AUTHENTICATION_AUTHORITY={Cognito Domain}/{User Pool ID} # Update with your Cognito Domain and User Pool ID as follows - https://cognito-idp.us-west-1.amazonaws.com/us-west-1_DL8xfTzj8
 AUTHENTICATION_CLIENT_ID={Client ID} # Update with your Client ID
 AUTHENTICATION_CALLBACK_URL=http://localhost:8585/callback

diff --git a/...tadata-docs/content/v1.2.x/deployment/security/amazon-cognito-sso/kubernetes.md b/...tadata-docs/content/v1.2.x/deployment/security/amazon-cognito-sso/kubernetes.md
@@ -22,7 +22,7 @@ openmetadata:
     authentication:
       provider: "aws-cognito"
       publicKeys:
-        - "http://{your domain}:8585/api/v1/system/config/jwks"
+        - "{your domain}/api/v1/system/config/jwks"
         - "{Cognito Domain}/{User Pool ID}/.well-known/jwks.json" # Update with your Cognito Domain and User Pool ID
       authority: "{Cognito Domain}/{User Pool ID}" # Update with your Cognito Domain and User Pool ID as follows - https://cognito-idp.us-west-1.amazonaws.com/us-west-1_DL8xfTzj8
       clientId: "{Client ID}" # Update with your Client ID

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/auth0/bare-metal.md b/openmetadata-docs/content/v1.2.x/deployment/security/auth0/bare-metal.md
@@ -14,7 +14,7 @@ authenticationConfiguration:
   provider: "auth0"
   publicKeyUrls: 
     - "https://parth-panchal.us.auth0.com/.well-known/jwks.json"
-    - "http://{your domain}:8585/api/v1/system/config/jwks" #Make sure this URL is always configured to enable JWT tokens
+    - "{your domain}/api/v1/system/config/jwks" #Make sure this URL is always configured to enable JWT tokens
   authority: "https://parth-panchal.us.auth0.com/"
   clientId: "{Client ID}"
   callbackUrl: "http://localhost:8585/callback"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/auth0/docker.md b/openmetadata-docs/content/v1.2.x/deployment/security/auth0/docker.md
@@ -20,7 +20,7 @@ AUTHORIZER_ADMIN_PRINCIPALS=[admin]  # Your `name` from name@domain.com
 AUTHORIZER_PRINCIPAL_DOMAIN=open-metadata.org # Update with your domain
 
 AUTHENTICATION_PROVIDER=auth0
-AUTHENTICATION_PUBLIC_KEYS=[{Domain}/.well-known/jwks.json,http://{your openmetadata domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+AUTHENTICATION_PUBLIC_KEYS=[{Domain}/.well-known/jwks.json,{your domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
 
 AUTHENTICATION_AUTHORITY={Domain} # Update with your Domain
 AUTHENTICATION_CLIENT_ID={Client ID} # Update with your Client ID

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/auth0/kubernetes.md b/openmetadata-docs/content/v1.2.x/deployment/security/auth0/kubernetes.md
@@ -22,7 +22,7 @@ openmetadata:
     authentication:
       provider: "auth0"
       publicKeys: 
-      - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+      - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
       - "{Auth0 Domain Name}/.well-known/jwks.json"
       authority: "https://parth-panchal.us.auth0.com/"
       clientId: "{Client ID}"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/azure/bare-metal.md b/openmetadata-docs/content/v1.2.x/deployment/security/azure/bare-metal.md
@@ -14,7 +14,7 @@ authenticationConfiguration:
   provider: "azure"
   publicKeyUrls:
     - "https://login.microsoftonline.com/common/discovery/keys"
-    - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+    - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
   authority: "https://login.microsoftonline.com/{Tenant ID}"
   clientId: "{Client ID}" # Azure Application
   callbackUrl: "http://localhost:8585/callback"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/azure/docker.md b/openmetadata-docs/content/v1.2.x/deployment/security/azure/docker.md
@@ -22,7 +22,7 @@ AUTHORIZER_ADMIN_PRINCIPALS=[admin]  # Your `name` from name@domain.com
 AUTHORIZER_PRINCIPAL_DOMAIN=open-metadata.org # Update with your domain
 
 AUTHENTICATION_PROVIDER=azure
-AUTHENTICATION_PUBLIC_KEYS=[https://login.microsoftonline.com/common/discovery/keys, http://{your openmetadata domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+AUTHENTICATION_PUBLIC_KEYS=[https://login.microsoftonline.com/common/discovery/keys, {your domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
 AUTHENTICATION_AUTHORITY=https://login.microsoftonline.com/{Tenant ID} # Update with your Tenant ID
 AUTHENTICATION_CLIENT_ID={Client ID} # Update with your Client ID of Azure Application
 AUTHENTICATION_CALLBACK_URL=http://localhost:8585/callback

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/azure/kubernetes.md b/openmetadata-docs/content/v1.2.x/deployment/security/azure/kubernetes.md
@@ -24,7 +24,7 @@ openmetadata:
     authentication:
       provider: "azure"
       publicKeys:
-      - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+      - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
       - "https://login.microsoftonline.com/common/discovery/keys"
       authority: "https://login.microsoftonline.com/{Tenant ID}"
       clientId: "{Client ID}" # Azure Application

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/basic-auth/index.md b/openmetadata-docs/content/v1.2.x/deployment/security/basic-auth/index.md
@@ -35,7 +35,7 @@ The following configuration controls the auth mechanism for OpenMetadata. Update
 ```yaml
 authenticationConfiguration:
   provider: ${AUTHENTICATION_PROVIDER:-basic}
-  publicKeyUrls: ${AUTHENTICATION_PUBLIC_KEYS:-[http://{your openmetadata domain}/api/v1/system/config/jwks]} # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+  publicKeyUrls: ${AUTHENTICATION_PUBLIC_KEYS:-[{your domain}/api/v1/system/config/jwks]} # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
   authority: ${AUTHENTICATION_AUTHORITY:-https://accounts.google.com}
   enableSelfSignup : ${AUTHENTICATION_ENABLE_SELF_SIGNUP:-true}
 ```

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/custom-oidc/bare-metal.md b/openmetadata-docs/content/v1.2.x/deployment/security/custom-oidc/bare-metal.md
@@ -19,7 +19,7 @@ authenticationConfiguration:
   providerName: "KeyCloak"
   publicKeyUrls:
     - "http://localhost:8080/realms/myrealm/protocol/openid-connect/certs"
-    - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+    - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
   authority: "http://localhost:8080/realms/myrealm"
   clientId: "{client id}"
   callbackUrl: "http://localhost:8585/callback"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/custom-oidc/docker.md b/openmetadata-docs/content/v1.2.x/deployment/security/custom-oidc/docker.md
@@ -21,7 +21,7 @@ AUTHORIZER_PRINCIPAL_DOMAIN=open-metadata.org # Update with your domain
 
 AUTHENTICATION_PROVIDER=custom-oidc
 CUSTOM_OIDC_AUTHENTICATION_PROVIDER_NAME=KeyCloak
-AUTHENTICATION_PUBLIC_KEYS=[http://localhost:8080/realms/myrealm/protocol/openid-connect/certs, http://{your openmetadata domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+AUTHENTICATION_PUBLIC_KEYS=[http://localhost:8080/realms/myrealm/protocol/openid-connect/certs, {your domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
 AUTHENTICATION_AUTHORITY={http://localhost:8080/realms/myrealm}
 AUTHENTICATION_CLIENT_ID={Client ID} # Update with your Client ID
 AUTHENTICATION_CALLBACK_URL=http://localhost:8585/callback

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/custom-oidc/kubernetes.md b/openmetadata-docs/content/v1.2.x/deployment/security/custom-oidc/kubernetes.md
@@ -22,7 +22,7 @@ global:
   authentication:
     provider: "custom-oidc"
     publicKeys:
-    - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+    - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
     - "http://localhost:8080/realms/myrealm/protocol/openid-connect/certs"
     authority: "http://localhost:8080/realms/myrealm"
     clientId: "{Client ID}"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/enable-jwt-tokens.md b/openmetadata-docs/content/v1.2.x/deployment/security/enable-jwt-tokens.md
@@ -78,15 +78,27 @@ authenticationConfiguration:
   jwtPrincipalClaims: ${AUTHENTICATION_JWT_PRINCIPAL_CLAIMS:-[email,preferred_username,sub]}
 ```
 
-add `http://{your domain}:8585/api/v1/system/config/jwks` to `publicKeyUrls`. You should append to the existing configuration such that
+add `{your domain}/api/v1/system/config/jwks` to `publicKeyUrls`. You should append to the existing configuration such that
 your SSO and JWTToken auth verification will work. 
 
 ```yaml
-  publicKeyUrls: ${AUTHENTICATION_PUBLIC_KEYS:-[{your SSO public keys URL}, http://{your domain}:8585/api/v1/system/config/jwks]}
+  publicKeyUrls: ${AUTHENTICATION_PUBLIC_KEYS:-[{your SSO public keys URL}, {your domain}/api/v1/system/config/jwks]}
 ```
 
 Once you configure the above settings, restart OpenMetadata server .
 
+{% note %}
+
+<h2>Note on JWKS url Network Reachbility</h2>
+
+Make sure the above JWKS URI - `{your domain}/api/v1/system/config/jwks` is reachable from OpenMetadata Server Instance (VM or Docker Container or Kubernetes Pod). You can run the below command from the OpenMetadata Server to test it's reachility -
+
+```
+wget -O - {your domain}/api/v1/system/config/jwks
+```
+
+{% /note %}
+
 ## Generate Token
 
 Once the above configuration is updated, the server is restarted. Admin can go to Settings -> Bots page.

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/google/bare-metal.md b/openmetadata-docs/content/v1.2.x/deployment/security/google/bare-metal.md
@@ -14,7 +14,7 @@ authenticationConfiguration:
   provider: "google"
   publicKeyUrls:
     - "https://www.googleapis.com/oauth2/v3/certs"
-    - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+    - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
   authority: "https://accounts.google.com"
   clientId: "{client id}"
   callbackUrl: "http://localhost:8585/callback"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/google/docker.md b/openmetadata-docs/content/v1.2.x/deployment/security/google/docker.md
@@ -21,7 +21,7 @@ AUTHORIZER_INGESTION_PRINCIPALS=[ingestion-bot]
 AUTHORIZER_PRINCIPAL_DOMAIN=open-metadata.org # Update with your domain
 
 AUTHENTICATION_PROVIDER=google
-AUTHENTICATION_PUBLIC_KEYS=[https://www.googleapis.com/oauth2/v3/certs, http://{your openmetadata domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+AUTHENTICATION_PUBLIC_KEYS=[https://www.googleapis.com/oauth2/v3/certs, {your domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
 AUTHENTICATION_AUTHORITY=https://accounts.google.com
 AUTHENTICATION_CLIENT_ID={Client ID} # Update with your Google SSO Client ID
 AUTHENTICATION_CALLBACK_URL=http://localhost:8585/callback

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/google/kubernetes.md b/openmetadata-docs/content/v1.2.x/deployment/security/google/kubernetes.md
@@ -20,14 +20,12 @@ openmetadata:
       initialAdmins:
         - "user1"
         - "user2"
-      botPrincipals:
-        - "<service_application_client_id>"
       principalDomain: "open-metadata.org"
     authentication:
       provider: "google"
       publicKeys:
         - "https://www.googleapis.com/oauth2/v3/certs"
-        - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+        - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
       authority: "https://accounts.google.com"
       clientId: "{client id}"
       callbackUrl: "http://localhost:8585/callback"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/keycloak/bare-metal.md b/openmetadata-docs/content/v1.2.x/deployment/security/keycloak/bare-metal.md
@@ -20,7 +20,7 @@ authenticationConfiguration:
   providerName: "KeyCloak"
   publicKeyUrls:
     - "http://localhost:8081/auth/realms/data-sec/protocol/openid-connect/certs"
-    - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+    - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
   authority: "http://localhost:8081/auth/realms/data-sec"
   clientId: "open-metadata"
   callbackUrl: "http://localhost:8585/callback"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/keycloak/docker.md b/openmetadata-docs/content/v1.2.x/deployment/security/keycloak/docker.md
@@ -23,7 +23,7 @@ AUTHORIZER_PRINCIPAL_DOMAIN=open-metadata.org # Update with your domain
 
 AUTHENTICATION_PROVIDER=custom-oidc
 CUSTOM_OIDC_AUTHENTICATION_PROVIDER_NAME=KeyCloak
-AUTHENTICATION_PUBLIC_KEYS=[http://localhost:8081/auth/realms/data-sec/protocol/openid-connect/certs, http://{your openmetadata domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+AUTHENTICATION_PUBLIC_KEYS=[http://localhost:8081/auth/realms/data-sec/protocol/openid-connect/certs, {your domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
 AUTHENTICATION_AUTHORITY={http://localhost:8081/auth/realms/data-sec}
 AUTHENTICATION_CLIENT_ID=open-metadata # Update with your Client ID
 AUTHENTICATION_CALLBACK_URL=http://localhost:8585/callback

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/keycloak/kubernetes.md b/openmetadata-docs/content/v1.2.x/deployment/security/keycloak/kubernetes.md
@@ -24,7 +24,7 @@ openmetadata:
     authentication:
       provider: "custom-oidc"
       publicKeys:
-      - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+      - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
       - "http://localhost:8081/auth/realms/data-sec/protocol/openid-connect/certs"
       authority: "http://localhost:8081/auth/realms/data-sec"
       clientId: "{Client ID}"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/ldap/bare-metal.md b/openmetadata-docs/content/v1.2.x/deployment/security/ldap/bare-metal.md
@@ -14,7 +14,7 @@ The following configuration controls the auth mechanism for OpenMetadata. Update
 ```yaml
 authenticationConfiguration:
   provider: ${AUTHENTICATION_PROVIDER:-ldap}
-  publicKeyUrls: ${AUTHENTICATION_PUBLIC_KEYS:-[http://{your openmetadata domain}/api/v1/system/config/jwks]} # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+  publicKeyUrls: ${AUTHENTICATION_PUBLIC_KEYS:-[{your domain}/api/v1/system/config/jwks]} # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
   authority: ${AUTHENTICATION_AUTHORITY:-https://accounts.google.com}
   enableSelfSignup : ${AUTHENTICATION_ENABLE_SELF_SIGNUP:-false}
   ldapConfiguration:

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/okta/bare-metal.md b/openmetadata-docs/content/v1.2.x/deployment/security/okta/bare-metal.md
@@ -14,7 +14,7 @@ authenticationConfiguration:
   provider: "okta"
   publicKeyUrls:
     - "{ISSUER_URL}/v1/keys"
-    - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+    - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
   authority: "{ISSUER_URL}"
   clientId: "{CLIENT_ID - SPA APP}"
   callbackUrl: "http://localhost:8585/callback"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/okta/docker.md b/openmetadata-docs/content/v1.2.x/deployment/security/okta/docker.md
@@ -27,7 +27,7 @@ AUTHORIZER_INGESTION_PRINCIPALS=[ingestion-bot, <service_application_client_id>]
 AUTHORIZER_PRINCIPAL_DOMAIN=open-metadata.org # Update with your domain
 
 AUTHENTICATION_PROVIDER=okta
-AUTHENTICATION_PUBLIC_KEYS=[{ISSUER_URL}/v1/keys, http://{your openmetadata domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+AUTHENTICATION_PUBLIC_KEYS=[{ISSUER_URL}/v1/keys, {your domain}/api/v1/system/config/jwks] # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
 AUTHENTICATION_AUTHORITY={ISSUER_URL} # Update with your Issuer URL
 AUTHENTICATION_CLIENT_ID={CLIENT_ID - SPA APP} # Update with your Client ID
 AUTHENTICATION_CALLBACK_URL=http://localhost:8585/callback

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/okta/kubernetes.md b/openmetadata-docs/content/v1.2.x/deployment/security/okta/kubernetes.md
@@ -25,7 +25,7 @@ openmetadata:
     authentication:
       provider: "okta"
       publicKeys:
-      - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+      - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
       - "{ISSUER_URL}/v1/keys"
       authority: "{ISSUER_URL}"
       clientId: "{CLIENT_ID - SPA APP}"

diff --git a/openmetadata-docs/content/v1.2.x/deployment/security/one-login/bare-metal.md b/openmetadata-docs/content/v1.2.x/deployment/security/one-login/bare-metal.md
@@ -19,7 +19,7 @@ authenticationConfiguration:
   providerName: "OneLogin"
   publicKeyUrls: 
     - "{IssuerUrl}/certs"
-    - "http://{your openmetadata domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
+    - "{your domain}/api/v1/system/config/jwks" # Update with your Domain and Make sure this "/api/v1/system/config/jwks" is always configured to enable JWT tokens
   authority: "{IssuerUrl}"
   clientId: "{client id}"
   callbackUrl: "http://localhost:8585/callback"