diff --git a/docs/auth/saml.md b/docs/auth/saml.md index 7af1730336..2af244acc8 100644 --- a/docs/auth/saml.md +++ b/docs/auth/saml.md @@ -21,18 +21,29 @@ Below is an example SAML attribute that embeds user organization membership in t HR Sales + + IT + HR + ``` Below, the corresponding AWX configuration. ``` { "saml_attr": "member-of", - "remove": true + "saml_admin_attr": "administrator-of", + "remove": true, + 'remove_admins': true } ``` **saml_attr:** The saml attribute name where the organization array can be found. + **remove:** True to remove user from all organizations before adding the user to the list of Organizations. False to keep the user in whatever Organization(s) they are in while adding the user to the Organization(s) in the SAML attribute. +**saml_admin_attr:** The saml attribute name where the organization administrators array can be found. + +**remove_admins:** True to remove user from all organizations that it is admin before adding the user to the list of Organizations admins. False to keep the user in whatever Organization(s) they are in as admin while adding the user as an Organization administrator in the SAML attribute. + **Example SAML Team Map** Below is another example of a SAML attribute that contains a Team membership in a list. ```