Skip to content

Commit 1b9fe12

Browse files
author
Adam Locke
authored
Applying changes for #61089 (#64601) (#64605)
1 parent 4c3300b commit 1b9fe12

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

x-pack/docs/en/security/authentication/saml-guide.asciidoc

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -146,9 +146,12 @@ xpack.security.authc.realms.saml.saml1::
146146
See <<realms>> for more explanation of realms.
147147

148148
order::
149-
You should define a unique order on each realm in your authentication chain.
150-
It is recommended that the SAML realm be at the bottom of your authentication
151-
chain (that is, that it has the _highest_ order).
149+
The order of the realm within the realm chain. Realms with a lower order
150+
have highest priority and are consulted first. We recommend giving
151+
password-based realms such as file, native, LDAP, and Active Directory the
152+
lowest order (highest priority), followed by SSO realms such as SAML and
153+
OpenID Connect. If you have multiple realms of the same type, give the most
154+
frequently accessed realm the lowest order to have it consulted first.
152155

153156
idp.metadata.path::
154157
This is the path to the metadata file that you saved for your Identity Provider.

0 commit comments

Comments
 (0)