improvements: address feedback

This commit is contained in:
Scott Wilson
2025-05-14 16:20:50 -07:00
parent beb7200233
commit 3b9a50d65d
2 changed files with 20 additions and 12 deletions
@@ -24,8 +24,11 @@ and removed from any Infisical groups not present in the claim.
<Steps> <Steps>
<Step title="Configure a groups claim in your OIDC provider"> <Step title="Configure a groups claim in your OIDC provider">
1. To enable OIDC Group Membership Mapping, you must configure a `groups` claim in your OIDC provider with the following format. To enable OIDC Group Membership Mapping, you must configure a `groups` claim in your OIDC provider.
Add a `groups` property with a list of the user's OIDC group names to your token.
Example of expected token payload:
```json ```json
{ {
// "email": "[email protected]", // "email": "[email protected]",
+16 -11
View File
@@ -266,18 +266,23 @@
"documentation/platform/sso/google-saml", "documentation/platform/sso/google-saml",
"documentation/platform/sso/auth0-saml", "documentation/platform/sso/auth0-saml",
{ {
"group": "Keycloak OIDC", "group": "OIDC",
"pages": [ "pages": [
"documentation/platform/sso/keycloak-oidc/overview", {
"documentation/platform/sso/keycloak-oidc/group-membership-mapping" "group": "Keycloak OIDC",
] "pages": [
}, "documentation/platform/sso/keycloak-oidc/overview",
"documentation/platform/sso/auth0-oidc", "documentation/platform/sso/keycloak-oidc/group-membership-mapping"
{ ]
"group": "General OIDC", },
"pages": [ "documentation/platform/sso/auth0-oidc",
"documentation/platform/sso/general-oidc/overview", {
"documentation/platform/sso/general-oidc/group-membership-mapping" "group": "General OIDC",
"pages": [
"documentation/platform/sso/general-oidc/overview",
"documentation/platform/sso/general-oidc/group-membership-mapping"
]
}
] ]
} }
] ]