summary refs log tree commit diff
path: root/develop/usage/configuration/config_documentation.html
diff options
context:
space:
mode:
authorMatMaul <MatMaul@users.noreply.github.com>2023-03-30 11:10:40 +0000
committerMatMaul <MatMaul@users.noreply.github.com>2023-03-30 11:10:40 +0000
commitb1ff7595f87cab1b5e9911ea56f1c1044bb7875e (patch)
treeb15fa4584c2d952d7c3fbff780d2daa7f9c55407 /develop/usage/configuration/config_documentation.html
parentdeploy: 9228ae633f209212ed55de7943d1a8aee3645b57 (diff)
downloadsynapse-b1ff7595f87cab1b5e9911ea56f1c1044bb7875e.tar.xz
deploy: a3bad89d57645b2ea304d2900adab71a786b0172
Diffstat (limited to 'develop/usage/configuration/config_documentation.html')
-rw-r--r--develop/usage/configuration/config_documentation.html7
1 files changed, 7 insertions, 0 deletions
diff --git a/develop/usage/configuration/config_documentation.html b/develop/usage/configuration/config_documentation.html
index 6bf562448c..5df2ccfc01 100644
--- a/develop/usage/configuration/config_documentation.html
+++ b/develop/usage/configuration/config_documentation.html
@@ -2770,6 +2770,12 @@ match a pre-existing account instead of failing. This could be used if
 switching from password logins to OIDC. Defaults to false.</p>
 </li>
 <li>
+<p><code>enable_registration</code>: set to 'false' to disable automatic registration of new
+users. This allows the OIDC SSO flow to be limited to sign in only, rather than
+automatically registering users that have a valid SSO login but do not have
+a pre-registered account. Defaults to true.</p>
+</li>
+<li>
 <p><code>user_mapping_provider</code>: Configuration for how attributes returned from a OIDC
 provider are mapped onto a matrix user. This setting has the following
 sub-properties:</p>
@@ -2891,6 +2897,7 @@ claim MUST contain &quot;admin&quot;.</p>
     userinfo_endpoint: &quot;https://accounts.example.com/userinfo&quot;
     jwks_uri: &quot;https://accounts.example.com/.well-known/jwks.json&quot;
     skip_verification: true
+    enable_registration: true
     user_mapping_provider:
       config:
         subject_claim: &quot;id&quot;