public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-25 04:28:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Clarify JSON array format for OIDC groups and full_group_path claims

Browse Source 
Clarify JSON array format for OIDC groups and full_group_path claims, after a recent case where an issue occurred as a result of the groups claim formatted as a comma-separated string
This commit is contained in:
Alex Seymour
2026-01-13 15:15:41 -08:00
committed by Billy Tat
parent 86ce745693
commit c13e9c7023
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/authentication-config/configure-generic-oidc.md
+7 -1
View File
@@ -35,6 +35,12 @@ In your IdP, create a new client with the settings below:
In the new OIDC client, create mappers to expose the user's fields.
:::note
The `groups` and `full_group_path` claims generated by the Groups and Group Path mappers, which you create within the OIDC client in your Identity Provider, should be JSON arrays, e.g. `"groups":["admins","devs","qa"]` and `"full_group_path":["/admins","/devs","/qa"]`.
:::
1. Create a new `Groups Mapper` with the settings below:
Setting | Value
@@ -153,4 +159,4 @@ In some cases, the "Invalid grant_type" error message may be misleading and is a
## Configuring OIDC Single Logout (SLO)
<ConfigureSLOOidc />
<ConfigureSLOOidc />