diff --git a/RELEASE-NOTES.md b/RELEASE-NOTES.md index b94fa2eb5f..5d89f2994f 100644 --- a/RELEASE-NOTES.md +++ b/RELEASE-NOTES.md @@ -127,7 +127,23 @@ Any webhook can now specify an `Authorization` header to be sent along every req #### [Map OIDC groups to Orgs/Teams](https://codeberg.org/forgejo/forgejo/commit/e8186f1c0) -* (description) +When a user logs in Forgejo using an provider such as [Keycloak](https://www.keycloak.org/), they can now automatically be part of a Forgejo team, depending on the OIDC group they belong to. For instance: + +```json +{"Developer": {"MyForgejoOrganization": ["MyForgejoTeam1", "MyForgejoTeam2"]}} +``` + +Means that the user who is in the OIDC group `Developer` will automatically be a member of the `MyForgejoTeam1` and `MyForgejoTeam2` teams in the `MyForgejoOrganization` organization. + +This mapping is set when adding a new `Authentication Source` in the `Site Administration` panel. + +OIDC Group mapping part1 + +... + +OIDC Group mapping part2 + +[Read more...](https://forgejo.org/docs/admin/oauth2-provider/#endpoints) #### [RSS Feed for Releases and Tags](https://codeberg.org/forgejo/forgejo/commit/48d71b7d6) diff --git a/releases/images/forgejo-v1.19-oidc-part1.png b/releases/images/forgejo-v1.19-oidc-part1.png new file mode 100644 index 0000000000..4b49122014 Binary files /dev/null and b/releases/images/forgejo-v1.19-oidc-part1.png differ diff --git a/releases/images/forgejo-v1.19-oidc-part2.png b/releases/images/forgejo-v1.19-oidc-part2.png new file mode 100644 index 0000000000..d8265645c4 Binary files /dev/null and b/releases/images/forgejo-v1.19-oidc-part2.png differ