diff --git a/README.md b/README.md index f812893ac13b7dc9acca555c5118fb4a2c10af69..1044ee2e4c8a9c3098fd3a929b6329e2a43ae616 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,3 @@ - #### Minimal Intro: - [SSO](https://lmddgtfy.net/?q=SSO): Single Sign On - SLO: Single Log Out @@ -81,7 +80,7 @@ If you have `nginx` serving pages to users, you might need to configure `x-frame With `ssoauth` the only way to assign permissions is with groups: - when user logs in, `ssoauth` receives group names from the IDP - - if your project has `django.contrib.admin` `Groups` with exactly the same names, as received from the IDP, these groups are assigned to the user (`django.contrib.auth` `User` is automatically created) + - if your project has `django.contrib.admin` `Groups` with exactly the same names, as received from the IDP, these groups are assigned to the user. - all other groups and permissions are automatically removed from the user (so it's not possible to "patch" what IDP says with some extra rules in the project) You can predefine some groups in project settings (see `ssoauth` default config for details). These predefined groups will be created automatically (when migrating). For example, a superuser group: