Skip to content

added oidc credential forwarding not enabled notification #391

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Oct 28, 2025
+61 −0
Merged

added oidc credential forwarding not enabled notification #391

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
514064e
added oidc credential forwarding not enabled notification
evelinadanielsson Oct 2, 2025
f4cfef5
docs: suggestions for improvements updates
evelinadanielsson Oct 22, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
61 changes: 61 additions & 0 deletions modules/ROOT/pages/notifications/all-notifications.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3649,6 +3649,67 @@ m|SECURITY
m|WARNING
|===

[#_neo_clientnotification_security_oidccredentialforwardingnotenabled]
=== OIDC credential forwarding is not enabled

.Notification details
[cols="<1s,<4"]
|===
|Neo4j code
m|Neo.ClientNotification.Security.OidcCredentialForwardingNotEnabled
|Title
a|OIDC credential forwarding is not enabled.
|Description
a|Use setting 'dbms.security.allow_oidc_credential_forwarding_enabled' to enable OIDC credential forwarding.
|Category
m|SECURITY
|GQLSTATUS code
m|01N74
|Status description
|warn: OIDC credential forwarding disabled.
Use the setting `dbms.security.allow_oidc_credential_forwarding_enabled` to enable OIDC credential forwarding.
|Classification
m|SECURITY
|SeverityLevel
m|WARNING
|===

.Create a remote database alias with remote credentials set to OIDC credential forwarding when OIDC credential forwarding is not enabled.
[.tabbed-example]
=====
[.include-with-GQLSTATUS-code]
======
Command::
+
[source, cypher]
----
CREATE ALIAS `remote-neo4j` FOR DATABASE `neo4j` AT "neo4j+s://location:7687" OIDC CREDENTIAL FORWARDING
----

Returned GQLSTATUS code::
01N74

Returned status description::
warn: OIDC credential forwarding disabled.
Use the setting 'dbms.security.allow_oidc_credential_forwarding_enabled' to enable OIDC credential forwarding.

Suggestions for improvement::
The remote database alias has been successfully created, but OIDC credential forwarding is not enabled. To use the alias to connect to the remote Neo4j DBMS, allow OIDC credential forwarding by setting `dbms.security.allow_oidc_credential_forwarding_enabled` to `true`.

======
[.include-with-neo4j-code]
======
Command::
+
[source, cypher]
----
CREATE ALIAS `remote-neo4j` FOR DATABASE `neo4j` AT "neo4j+s://location:7687" OIDC CREDENTIAL FORWARDING
----

Suggestions for improvement::
The remote database alias has been successfully created, but OIDC credential forwarding is not enabled. To use the alias to connect to the remote Neo4j DBMS, allow OIDC credential forwarding by setting `dbms.security.allow_oidc_credential_forwarding_enabled` to `true`.
======
=====

[#_neo_clientnotification_security_shardedperformance]
=== Sharded privilege performance
Expand Down