mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-09-22 13:39:35 +00:00
improvements: address feedback
This commit is contained in:
@@ -24,8 +24,11 @@ and removed from any Infisical groups not present in the claim.
|
||||
|
||||
<Steps>
|
||||
<Step title="Configure a groups claim in your OIDC provider">
|
||||
1. To enable OIDC Group Membership Mapping, you must configure a `groups` claim in your OIDC provider with the following format.
|
||||
To enable OIDC Group Membership Mapping, you must configure a `groups` claim in your OIDC provider.
|
||||
|
||||
Add a `groups` property with a list of the user's OIDC group names to your token.
|
||||
|
||||
Example of expected token payload:
|
||||
```json
|
||||
{
|
||||
// "email": "john@provider.com",
|
||||
|
||||
@@ -266,18 +266,23 @@
|
||||
"documentation/platform/sso/google-saml",
|
||||
"documentation/platform/sso/auth0-saml",
|
||||
{
|
||||
"group": "Keycloak OIDC",
|
||||
"group": "OIDC",
|
||||
"pages": [
|
||||
"documentation/platform/sso/keycloak-oidc/overview",
|
||||
"documentation/platform/sso/keycloak-oidc/group-membership-mapping"
|
||||
]
|
||||
},
|
||||
"documentation/platform/sso/auth0-oidc",
|
||||
{
|
||||
"group": "General OIDC",
|
||||
"pages": [
|
||||
"documentation/platform/sso/general-oidc/overview",
|
||||
"documentation/platform/sso/general-oidc/group-membership-mapping"
|
||||
{
|
||||
"group": "Keycloak OIDC",
|
||||
"pages": [
|
||||
"documentation/platform/sso/keycloak-oidc/overview",
|
||||
"documentation/platform/sso/keycloak-oidc/group-membership-mapping"
|
||||
]
|
||||
},
|
||||
"documentation/platform/sso/auth0-oidc",
|
||||
{
|
||||
"group": "General OIDC",
|
||||
"pages": [
|
||||
"documentation/platform/sso/general-oidc/overview",
|
||||
"documentation/platform/sso/general-oidc/group-membership-mapping"
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
|
||||
Reference in New Issue
Block a user