From 67e4015f67ad13d879a504ee5494ddda9211dc8c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Niko=20Ko=CC=88bler?= Date: Fri, 12 Apr 2024 09:26:53 +0200 Subject: [PATCH] improve doc for transient users MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit adding a note to pay attention especially to the default-roles Signed-off-by: Niko KoĢˆbler --- docs/transient-users.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/transient-users.md b/docs/transient-users.md index 8cb8443d3c..a10f845522 100644 --- a/docs/transient-users.md +++ b/docs/transient-users.md @@ -34,6 +34,9 @@ When using transient users, you should be aware of the following: - Roles and groups can be assigned to the transient users only by identity provider mappers of the respective identity provider. + This is especially important for the `default-roles-{realm}` realm role, + which is added to regular users automatically, but has to be assigned + to transient users also through a mapper (e.g. the `Hardcoded Role` mapper type). - Since every transient user is created afresh, mappers always work in the `Import` sync mode.