Skip to content

Commit 9edd549

Browse files
authored
DOCSP-34666 userAuthorizationClaims Backports (#6806)
* DOCS-16489 supportsHumanFlows (#5292) * DOCS-16489 Adds supportsHumanFlows * Adjusts text * Adjusts text * Adds version note * Fixes per Ali * Fixes per Varun * Fixes per Varun * Fixes build issue * fixes per Jason * fixes per Jason * DOCSP-37645 Refactors userAuthorizationClaims (#6797) * Fixes build issue * Changes bool to boolean * Fixes text
1 parent b136b41 commit 9edd549

File tree

1 file changed

+23
-5
lines changed

1 file changed

+23
-5
lines changed

source/includes/fact-oidc-providers.rst

Lines changed: 23 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -18,8 +18,16 @@
1818
- string
1919

2020
- The issuer URI of the IDP that the server should accept tokens from. This
21-
must match the ``iss`` field in any JWT used for authentication.
22-
21+
must match the ``iss`` field in any JWT used for authentication.
22+
23+
If you specify an unreachable issuer URI, MongoDB:
24+
25+
1. Logs a warning.
26+
#. Continues server startup, which allows you to update the issuer
27+
URI.
28+
#. Reattempts issuer contact. If MongoDB reaches the issuer URI
29+
and validates the access token, authentication succeeds. If
30+
the issuer URI remains unreachable, authentication fails.
2331

2432
* - ``authNamePrefix``
2533

@@ -116,7 +124,7 @@
116124

117125
- Optional
118126

119-
- Boolean
127+
- boolean
120128

121129
- Determines if the ``authorizationClaim`` field is required. The default
122130
value is ``true``.
@@ -152,6 +160,16 @@
152160
153161
.. versionadded:: 7.2 (*Also available in 7.0.5*)
154162

163+
* - ``authorizationClaim``
164+
165+
- Conditional
166+
167+
- string
168+
169+
- Required, unless ``useAuthorizationClaim`` is set to ``false``.
170+
171+
Claim extracted from access token that contains MongoDB role names.
172+
155173
* - ``logClaims``
156174

157175
- Optional
@@ -165,7 +183,7 @@
165183

166184
- Optional
167185

168-
- Integer
186+
- integer
169187

170188
- Frequency, in seconds, to request an updated JSON Web Key Set (JWKS) from the IDP.
171189
A setting of 0 disables polling.
@@ -174,7 +192,7 @@
174192

175193
- Optional
176194

177-
- Boolean
195+
- boolean
178196

179197
- Whether the OIDC provider supports human or machine workflows. This
180198
affects the ``clientId`` and ``matchPattern`` fields.

0 commit comments

Comments
 (0)