@@ -3649,6 +3649,69 @@ m|SECURITY
36493649m|WARNING
36503650|===
36513651
3652+ [#_neo_clientnotification_security_oidccredentialforwardingnotenabled]
3653+ === OIDC credential forwarding is not enabled
3654+ 
3655+ .Notification details 
3656+ [cols="<1s,<4"]
3657+ |===
3658+ |Neo4j  code
3659+ m|Neo.ClientNotification.Security.OidcCredentialForwardingNotEnabled
3660+ |Title
3661+ a|OIDC credential forwarding is not enabled.
3662+ |Description
3663+ a|Use setting 'dbms.security.allow_oidc_credential_forwarding_enabled' to enable OIDC credential forwarding.
3664+ |Category
3665+ m|SECURITY
3666+ |GQLSTATUS code
3667+ m|01N74
3668+ |Status description
3669+ |warn: OIDC credential forwarding disabled.
3670+ Use the setting `dbms.security.allow_oidc_credential_forwarding_enabled` to enable OIDC credential forwarding.
3671+ |Classification
3672+ m|SECURITY
3673+ |SeverityLevel
3674+ m|WARNING
3675+ |===
3676+ 
3677+ .Create a remote database alias with remote credentials set to OIDC credential forwarding when OIDC credential forwarding is not enabled. 
3678+ [.tabbed-example]
3679+ ===== 
3680+ [.include-with-GQLSTATUS-code] 
3681+ ====== 
3682+ Command::
3683+ +
3684+ [source, cypher]
3685+ ---- 
3686+ CREATE ALIAS `remote-neo4j` FOR DATABASE `neo4j` AT "neo4j+s://location:7687" OIDC CREDENTIAL FORWARDING 
3687+ ---- 
3688+ 
3689+ Returned GQLSTATUS code::
3690+ 01N74
3691+ 
3692+ Returned status description::
3693+ warn: OIDC credential forwarding disabled.
3694+ Use the setting 'dbms.security.allow_oidc_credential_forwarding_enabled' to enable OIDC credential forwarding.
3695+ 
3696+ Suggestions for improvement::
3697+ Enable OIDC credential forwarding through the `dbms.security.allow_oidc_credential_forwarding_enabled` setting.
3698+ Until enabled, the new remote database alias will fail all access attempts.
3699+ 
3700+ ====== 
3701+ [.include-with-neo4j-code] 
3702+ ====== 
3703+ Command::
3704+ +
3705+ [source, cypher]
3706+ ---- 
3707+ CREATE ALIAS `remote-neo4j` FOR DATABASE `neo4j` AT "neo4j+s://location:7687" OIDC CREDENTIAL FORWARDING 
3708+ ---- 
3709+ 
3710+ Suggestions for improvement::
3711+ Enable OIDC credential forwarding through the `dbms.security.allow_oidc_credential_forwarding_enabled` setting.
3712+ Until enabled, all access attempts to the new remote database alias will fail.
3713+ ====== 
3714+ ===== 
36523715
36533716[#_topology_notifications]
36543717== `TOPOLOGY` notifications
0 commit comments