Skip to content

Commit 9fa4dce

Browse files
Add a note about the automatic group_to_role_mapping being disabled (neo4j#2233) (neo4j#2254)
Cherry-picked from neo4j#2233 when any groups and roles are explicitly given Co-authored-by: Therese Magnusson <[email protected]>
1 parent 82dafaf commit 9fa4dce

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

modules/ROOT/pages/authentication-authorization/sso-integration.adoc

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -190,6 +190,12 @@ Custom-defined roles, such as `rolename`, must be explicitly created using the `
190190
See link:{neo4j-docs-base-uri}/cypher-manual/{page-version}/administration/access-control/manage-roles[the Cypher Manual -> Creating roles].
191191
====
192192

193+
[NOTE]
194+
====
195+
When specifying explicit group to role mapping the automatic mapping for groups and roles sharing a name is disabled.
196+
This means that all groups and roles need to be specified to be mapped, even if they share a name.
197+
====
198+
193199
[[auth-sso-configure-provider]]
194200
== Configure Neo4j to use an OpenID Connect Identity Provider
195201

0 commit comments

Comments
 (0)