-
Notifications
You must be signed in to change notification settings - Fork 373
Small Enterprise Hub updates #1752
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from 6 commits
6c71eec
460cd15
3863ca3
a130aef
165440b
88598fe
a94ebf2
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. cc @Kakulukian on this one |
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -23,7 +23,7 @@ When users log in, they will be prompted to complete the Single Sign-On authenti | |||||
|
|
||||||
| Single Sign-On only applies to your organization. Members may belong to other organizations on Hugging Face. | ||||||
|
|
||||||
| We support [role mapping](#role-mapping): you can automatically assign [roles](./organizations-security#access-control-in-organizations) to organization members based on attributes provided by your Identity Provider. | ||||||
| We support [role mapping](#role-mapping) and [resource group mapping](#resource-group-mapping). Based on attributes provided by your Identity Provider, you can dynamically assign [roles](./organizations-security#access-control-in-organizations) to organization members, or give them access to [resource groups](./enterprise-hub-resource-groups) defined in your organization. | ||||||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. 👍 |
||||||
|
|
||||||
| ### Supported Identity Providers | ||||||
|
|
||||||
|
|
@@ -73,6 +73,25 @@ If there is no match, a user will be assigned the default role for your organiza | |||||
|
|
||||||
| Role synchronization is performed on login. | ||||||
|
|
||||||
| #### Resource Group Mapping | ||||||
|
|
||||||
| When enabled, Resource Group Mapping allows you to dynamically assign members to [resource groups](./enterprise-hub-resource-groups) in your organization, based on data provided by your Identity Provider. | ||||||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||
|
|
||||||
| <div class="flex justify-center"> | ||||||
| <img class="block dark:hidden" src="https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/enterprise/resource-group-mapping.png"/> | ||||||
| <img class="hidden dark:block" src="https://huggingface.co/datasets/huggingface/documentation-images/resolve/main/enterprise/resource-group-mapping-dark.png"/> | ||||||
| </div> | ||||||
|
|
||||||
| - IdP Attribute Path | ||||||
|
|
||||||
| A JSON path to an attribute in your user's IdP profile data. | ||||||
|
|
||||||
| - Resource Group Mapping | ||||||
|
|
||||||
| A mapping from the IdP attribute value to a resource group in your Hugging Face organization. | ||||||
|
|
||||||
| If there is no match, the user will not be assigned to any resource group. | ||||||
|
|
||||||
| #### Matching email domains | ||||||
|
|
||||||
| When enabled, Matching email domains only allow organization members to complete SSO if the email provided by your identity provider matches one of their emails on Hugging Face. | ||||||
|
|
||||||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nice! cc @cfahlgren1 for viz