diff --git a/modules/ROOT/pages/notifications/all-notifications.adoc b/modules/ROOT/pages/notifications/all-notifications.adoc index e0d8c181..2fc0d13e 100644 --- a/modules/ROOT/pages/notifications/all-notifications.adoc +++ b/modules/ROOT/pages/notifications/all-notifications.adoc @@ -3649,6 +3649,67 @@ m|SECURITY m|WARNING |=== +[#_neo_clientnotification_security_oidccredentialforwardingnotenabled] +=== OIDC credential forwarding is not enabled + +.Notification details +[cols="<1s,<4"] +|=== +|Neo4j code +m|Neo.ClientNotification.Security.OidcCredentialForwardingNotEnabled +|Title +a|OIDC credential forwarding is not enabled. +|Description +a|Use setting 'dbms.security.allow_oidc_credential_forwarding_enabled' to enable OIDC credential forwarding. +|Category +m|SECURITY +|GQLSTATUS code +m|01N74 +|Status description +|warn: OIDC credential forwarding disabled. +Use the setting `dbms.security.allow_oidc_credential_forwarding_enabled` to enable OIDC credential forwarding. +|Classification +m|SECURITY +|SeverityLevel +m|WARNING +|=== + +.Create a remote database alias with remote credentials set to OIDC credential forwarding when OIDC credential forwarding is not enabled. +[.tabbed-example] +===== +[.include-with-GQLSTATUS-code] +====== +Command:: ++ +[source, cypher] +---- +CREATE ALIAS `remote-neo4j` FOR DATABASE `neo4j` AT "neo4j+s://location:7687" OIDC CREDENTIAL FORWARDING +---- + +Returned GQLSTATUS code:: +01N74 + +Returned status description:: +warn: OIDC credential forwarding disabled. +Use the setting 'dbms.security.allow_oidc_credential_forwarding_enabled' to enable OIDC credential forwarding. + +Suggestions for improvement:: +The remote database alias has been successfully created, but OIDC credential forwarding is not enabled. To use the alias to connect to the remote Neo4j DBMS, allow OIDC credential forwarding by setting `dbms.security.allow_oidc_credential_forwarding_enabled` to `true`. + +====== +[.include-with-neo4j-code] +====== +Command:: ++ +[source, cypher] +---- +CREATE ALIAS `remote-neo4j` FOR DATABASE `neo4j` AT "neo4j+s://location:7687" OIDC CREDENTIAL FORWARDING +---- + +Suggestions for improvement:: +The remote database alias has been successfully created, but OIDC credential forwarding is not enabled. To use the alias to connect to the remote Neo4j DBMS, allow OIDC credential forwarding by setting `dbms.security.allow_oidc_credential_forwarding_enabled` to `true`. +====== +===== [#_neo_clientnotification_security_shardedperformance] === Sharded privilege performance