Add tip to group mapping docs and update Hub release notes (#18156)

* link to role mapping and add to release notes

* move callout to top of page

* add space

* add multi teams use case to callout
This commit is contained in:
Stephanie Aurelio 2023-09-13 11:53:14 -07:00 committed by GitHub
parent d1476c9da7
commit 7fc553aeac
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 14 additions and 2 deletions

View File

@ -12,6 +12,10 @@ known issues for each Docker Hub release.
Take a look at the [Docker Public Roadmap](https://github.com/docker/roadmap/projects/1) to see what's coming next.
## 2023-08-28
- Organizations with SSO enabled can assign members to roles, organizations, and teams with [SCIM role mapping](scim.md#set-up-role-mapping).
## 2023-07-26
### New

View File

@ -1,14 +1,22 @@
{{ $scim_link := "[Enable SCIM](/docker-hub/scim/)" }}
{{ $mapping_link := "[user-level attributes](docker-hub/scim.md#set-up-role-mapping)"}}
{{ if eq (.Get "product") "admin" }}
{{ $scim_link = "[Enable SCIM](/admin/company/settings/scim/)" }}
{{ if eq (.Get "layer") "company" }}
{{ $scim_link = "[Enable SCIM](/admin/organization/security-settings/scim/)" }}
{{ $mapping_link = "[user-level attributes](admin/organization/security-settings/scim.md#set-up-role-mapping)"}}
{{ if eq (.Get "layer") "company" }}
{{ $scim_link = "[Enable SCIM](/admin/company/settings/scim/)" }}
{{ $mapping_link = "[user-level attributes](admin/company/settings/scim.md#set-up-role-mapping)"}}
{{ end }}
{{ end }}
With directory group-to-team provisioning from your IdP, user updates will automatically sync with your Docker organizations and teams.
> **Tip**
>
> Group mapping is ideal for adding a user to multiple organizations or multiple teams within one organization. If you don't need to set up multi-organization or multi-team assignment, you can use {{ $mapping_link }}.
{ .tip }
## How group mapping works
IdPs share with Docker the main attributes of every authorized user through SSO, such as email address, name, surname, and groups. These attributes are used by Just-In-Time (JIT) Provisioning to create or update the users Docker profile and their associations with organizations and teams on Docker Hub.