Improve authentication provider test coverage #258228

Authentication Provider Test Coverage Gaps

The following table summarizes test coverage across authentication providers. Gaps where SAML/OIDC have coverage but PKI/Kerberos do not are highlighted.

Coverage Matrix

Missing Files

HTTP/2 API integration configs:

• x-pack/platform/test/security_api_integration/pki.http2.config.ts
• x-pack/platform/test/security_api_integration/kerberos.http2.config.ts

Functional UI test configs and test directories:

• x-pack/platform/test/security_functional/pki.config.ts
• x-pack/platform/test/security_functional/pki.http2.config.ts
• x-pack/platform/test/security_functional/tests/pki/
• x-pack/platform/test/security_functional/kerberos.config.ts
• x-pack/platform/test/security_functional/kerberos.http2.config.ts
• x-pack/platform/test/security_functional/tests/kerberos/

Notes

Some asymmetries are intentional and not considered gaps:

• OIDC implicit flow / multiple realms — OIDC-specific protocol features, not applicable to PKI or Kerberos
• Kerberos anonymous access — a Kerberos-specific scenario with no equivalent for other providers
• SAML cloud config — cloud deployment concern not currently required for other providers

This assessment was completed using AI.