diff --git a/docs/documentation/platform/sso/general-oidc/group-membership-mapping.mdx b/docs/documentation/platform/sso/general-oidc/group-membership-mapping.mdx index 48890dc24..fd405fdfc 100644 --- a/docs/documentation/platform/sso/general-oidc/group-membership-mapping.mdx +++ b/docs/documentation/platform/sso/general-oidc/group-membership-mapping.mdx @@ -24,8 +24,11 @@ and removed from any Infisical groups not present in the claim. - 1. To enable OIDC Group Membership Mapping, you must configure a `groups` claim in your OIDC provider with the following format. + To enable OIDC Group Membership Mapping, you must configure a `groups` claim in your OIDC provider. + Add a `groups` property with a list of the user's OIDC group names to your token. + + Example of expected token payload: ```json { // "email": "john@provider.com", diff --git a/docs/mint.json b/docs/mint.json index c22d5ecab..5335c7423 100644 --- a/docs/mint.json +++ b/docs/mint.json @@ -266,18 +266,23 @@ "documentation/platform/sso/google-saml", "documentation/platform/sso/auth0-saml", { - "group": "Keycloak OIDC", + "group": "OIDC", "pages": [ - "documentation/platform/sso/keycloak-oidc/overview", - "documentation/platform/sso/keycloak-oidc/group-membership-mapping" - ] - }, - "documentation/platform/sso/auth0-oidc", - { - "group": "General OIDC", - "pages": [ - "documentation/platform/sso/general-oidc/overview", - "documentation/platform/sso/general-oidc/group-membership-mapping" + { + "group": "Keycloak OIDC", + "pages": [ + "documentation/platform/sso/keycloak-oidc/overview", + "documentation/platform/sso/keycloak-oidc/group-membership-mapping" + ] + }, + "documentation/platform/sso/auth0-oidc", + { + "group": "General OIDC", + "pages": [ + "documentation/platform/sso/general-oidc/overview", + "documentation/platform/sso/general-oidc/group-membership-mapping" + ] + } ] } ]