diff --git a/docs/pages/includes/config-reference/auth-service.yaml b/docs/pages/includes/config-reference/auth-service.yaml
index aff99b2547532..668071408f7a3 100644
--- a/docs/pages/includes/config-reference/auth-service.yaml
+++ b/docs/pages/includes/config-reference/auth-service.yaml
@@ -158,7 +158,7 @@ auth_service:
         require_session_mfa: false
         
         # second_factors is the list of allowed second factors for the cluster.
-        # Possible values: "otp" and "webauthn". Order does not matter.
+        # Possible values: "otp", "webauthn", and "sso". Order does not matter.
         # Defaults to ["otp"].
         second_factors: ["webauthn", "otp"]
 
diff --git a/docs/pages/reference/resources.mdx b/docs/pages/reference/resources.mdx
index 69617665fd5a7..a1371935a7f7d 100644
--- a/docs/pages/reference/resources.mdx
+++ b/docs/pages/reference/resources.mdx
@@ -223,7 +223,7 @@ metadata:
   name: cluster-auth-preference
 spec:
   # Sets the list of allowed second factors for the cluster. 
-  # Possible values: "otp" and "webauthn".
+  # Possible values: "otp", "webauthn", and "sso".
   # Defaults to ["otp"].
   second_factors: ["webauthn", "otp"]