Skip to content

Commit

Permalink
Docs(authentication): Mention the case sensitivity of authenticator_m…
Browse files Browse the repository at this point in the history
…ap definitions
  • Loading branch information
BrennanPaciorek committed Nov 13, 2024
1 parent fe4ee75 commit d5d88aa
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions docs/apps/authentication/authentication.md
Original file line number Diff line number Diff line change
Expand Up @@ -176,6 +176,10 @@ Doing this will cause your custom module to run in place of the default module i

In this function the user claims will be a dictionary defined by the authentication_maps. You need to update the users permissions in your application based on this.

When defining authenticator maps, you will need to be mindful of the case-sensitivity of the authenticator backend's output in order to get the expected output. For example,
LDAPs authenticator plugin accepts input in a case-insensitive manner, but returns a user's group membership in a case sensitive manner
(ie. cn=John Smith,dc=example,dc=org vs CN=John Smith,DC=example,DC=org); In most cases "cn=John Smith,dc=example,dc=org" would be considered a valid group name during user claims
reconciliation, but this may depend on the specific LDAP implementation being used.

## Optional RBAC dependency

Expand Down

0 comments on commit d5d88aa

Please sign in to comment.