Changed: release notes for #11605

GPortas · GPortas · commit d1bcb5bbd1f9 · 2025-07-18T14:56:53.000+01:00
diff --git a/doc/release-notes/11605-existing-shib-external-users-auth.md b/doc/release-notes/11605-existing-shib-external-users-auth.md
@@ -1,2 +1 @@
-Implemented a new feature flag ``dataverse.feature.api-bearer-auth-use-shib-user-on-id-match``, which allows the use of
-a Shibboleth user account when an identity match is found during API bearer authentication.
+Implemented a new feature flag ``dataverse.feature.api-bearer-auth-use-shib-user-on-id-match``, which supports the use of the new Dataverse client in instances that have historically allowed login via Shibboleth. Specifically, with this flag enabled, when an OIDC bridge is configured to allow OIDC login with validation by the bridged Shibboleth providers, users with existing Shibboleth-based accounts in Dataverse can log in to those accounts, thereby maintaining access to their existing content and retaining their roles. (For security reasons, Dataverse's current support for direct login via Shibboleth cannot be used in browser-based clients.)

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1 @@`
`1`		-Implemented a new feature flag ``dataverse.feature.api-bearer-auth-use-shib-user-on-id-match``, which allows the use of
`2`		`-a Shibboleth user account when an identity match is found during API bearer authentication.`
	`1`	+Implemented a new feature flag ``dataverse.feature.api-bearer-auth-use-shib-user-on-id-match``, which supports the use of the new Dataverse client in instances that have historically allowed login via Shibboleth. Specifically, with this flag enabled, when an OIDC bridge is configured to allow OIDC login with validation by the bridged Shibboleth providers, users with existing Shibboleth-based accounts in Dataverse can log in to those accounts, thereby maintaining access to their existing content and retaining their roles. (For security reasons, Dataverse's current support for direct login via Shibboleth cannot be used in browser-based clients.)