diff --git a/docs/Configuration.md b/docs/Configuration.md index bffa43a8..5e4e2d1f 100644 --- a/docs/Configuration.md +++ b/docs/Configuration.md @@ -52,7 +52,7 @@ property | comment | required --- | --- | --- name | Name of the group as shown in UI. Sets the property `profile/givenName` of that group. | optional description | Description of the group | optional -externalId | Required for groups which are synchronized from [external sources](https://jackrabbit.apache.org/oak/docs/security/authentication/externalloginmodule.html) like LDAP or Adobe IMS. The value has to be in format `;`. How the external ID and provider name look like is *External Identity Provider dependent*: For **Adobe IMS** it is `;ims` while for **Oak LDAP** it usually is `;` where LDAP-DN is the full distinguished name and IDP-NAME is configured in OSGI config PID `org.apache.jackrabbit.oak.security.authentication.ldap.impl.LdapIdentityProvider` property `provider-name`. Example: `externalId: "cn=group-name,ou=mydepart,ou=Groups,dc=comp,dc=com;IDPNAME"`. Since v1.9.3 | optional +externalId | Required for groups which are synchronized from [external sources](https://jackrabbit.apache.org/oak/docs/security/authentication/externalloginmodule.html) like [LDAP](https://jackrabbit.apache.org/oak/docs/security/authentication/ldap.html) or [Adobe IMS](https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/security/ims-support#aem-configuration). The value has to be in format `;`. How the external ID and provider name look like is *External Identity Provider dependent*: For **Adobe IMS** it is `;ims` while for **Oak LDAP** it usually is `;` where LDAP-DN is the full distinguished name and IDP-NAME is configured in OSGI config PID `org.apache.jackrabbit.oak.security.authentication.ldap.impl.LdapIdentityProvider` property `provider-name`. Example: `externalId: "cn=group-name,ou=mydepart,ou=Groups,dc=comp,dc=com;IDPNAME"`. Since v1.9.3 | optional path | Path of the intermediate node either relative or absolute. If relative, `/home/groups` is automatically prefixed. By default some implementation specific path is choosen. Usually the full group path is the (intermediate) path concatenated with a [randomized authorizable id](https://jackrabbit.apache.org/oak/docs/apidocs/org/apache/jackrabbit/oak/security/user/RandomAuthorizableNodeName.html). | optional isMemberOf | List of groups this groups is a member of. May be provided as yaml list or as comma-separated yaml string (*the use of comma-separated yaml strings is deprecated*, available to remain backwards compatible). | optional memberOf | same meaning as `isMemberOf`. This property is *deprecated*, please use `isMemberOf` instead. | optional