From b1ff7595f87cab1b5e9911ea56f1c1044bb7875e Mon Sep 17 00:00:00 2001
From: MatMaul
Date: Thu, 30 Mar 2023 11:10:40 +0000
Subject: deploy: a3bad89d57645b2ea304d2900adab71a786b0172
---
develop/print.html | 7 +++++++
1 file changed, 7 insertions(+)
(limited to 'develop/print.html')
diff --git a/develop/print.html b/develop/print.html
index b6a83b95c4..47001b8260 100644
--- a/develop/print.html
+++ b/develop/print.html
@@ -6168,6 +6168,12 @@ match a pre-existing account instead of failing. This could be used if
switching from password logins to OIDC. Defaults to false.
+enable_registration
: set to 'false' to disable automatic registration of new
+users. This allows the OIDC SSO flow to be limited to sign in only, rather than
+automatically registering users that have a valid SSO login but do not have
+a pre-registered account. Defaults to true.
+
+
user_mapping_provider
: Configuration for how attributes returned from a OIDC
provider are mapped onto a matrix user. This setting has the following
sub-properties:
@@ -6289,6 +6295,7 @@ claim MUST contain "admin".
userinfo_endpoint: "https://accounts.example.com/userinfo"
jwks_uri: "https://accounts.example.com/.well-known/jwks.json"
skip_verification: true
+ enable_registration: true
user_mapping_provider:
config:
subject_claim: "id"
--
cgit 1.5.1