From 99b28cb191ab9efcba00b697bffce5a2b9dde448 Mon Sep 17 00:00:00 2001
From: LRVT <21357789+l4rm4nd@users.noreply.github.com>
Date: Wed, 22 Jul 2026 17:00:57 +0200
Subject: [PATCH] Update README with OIDC and TOTP MFA instructions

Added sections for OIDC SSO and TOTP MFA configuration.
---
 examples/guacamole/README.md | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/examples/guacamole/README.md b/examples/guacamole/README.md
index 614a807..6ce2318 100644
--- a/examples/guacamole/README.md
+++ b/examples/guacamole/README.md
@@ -36,6 +36,22 @@ The default username is `guacadmin`. The default password is `guacadmin`.
 >
 > See `docker-compose-gluetun-traefik-authentik-oidc.yml` for an example with wireguard and Authentik OIDC SSO.
 
+### OIDC
+
+You can enable OIDC SSO via the environment variable `OPENID_ENABLED`.
+
+Once set to `True`, the OIDC extension is installed automatically and provisioned by the other `OPENID_` environment variables.
+
+See https://guacamole.apache.org/doc/gug/openid-auth.html
+
+### TOTP MFA
+
+You can enable TOTP MFA via the environment variable `TOTP_ENABLED`.
+
+Once set to `True`, the TOTP extension is installed automatically and will be active.
+
+See https://guacamole.apache.org/doc/gug/totp-auth.html
+
 ## Custom Extensions
 
 https://guacamole.apache.org/doc/gug/configuring-guacamole.html#overriding-guacamole-home