information about group infromation being sent to Spacelift

spacelift-io · Dec 12, 2024 · 46deb8d · 46deb8d
1 parent 6ed27ac
commit 46deb8d
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/docs/assets/screenshots/AzureGroupClaim.png b/docs/assets/screenshots/AzureGroupClaim.png
diff --git a/docs/integrations/single-sign-on/azure-ad-oidc-setup-guide.md b/docs/integrations/single-sign-on/azure-ad-oidc-setup-guide.md
@@ -73,6 +73,15 @@ Click the **Add** button, making sure to enable the **Turn on the Microsoft Grap
 
 ![](<../../assets/screenshots/image (113).png>)
 
+## Azure AD: Add Groups Claim (Optional)
+
+To include group information, you can optionally add the "groups" claim.
+Please select the options that meet your needs and then click the "Add" button.
+
+![](<../../assets/screenshots/AzureGroupClaim.png>)
+
+As noted at the top of this page, due to a limitation in Azure AD, group ID's will be passed through to Spacelift and not group names, this means that when you are setting up your login policies or group mapping, you should map the ID's and not the group names.
+
 ## Azure AD: Configure App Credentials
 
 Navigate to the **Certificates & secrets** section of your application.