summaryrefslogtreecommitdiffstats
path: root/docs/auth
diff options
context:
space:
mode:
authorAaron Tan <jangsutsr@gmail.com>2017-06-19 22:57:12 +0200
committerAaron Tan <jangsutsr@gmail.com>2017-06-20 18:17:13 +0200
commit70cccb0e5747a3fba71e0fa0de59c8dd0e74d3e8 (patch)
treeec8a88636f55498e2d92ba8253e3eaaa08912577 /docs/auth
parentMerge pull request #6609 from jlmitch5/newCredOnJT (diff)
downloadawx-70cccb0e5747a3fba71e0fa0de59c8dd0e74d3e8.tar.xz
awx-70cccb0e5747a3fba71e0fa0de59c8dd0e74d3e8.zip
Expand scope of enterprise user types.
Diffstat (limited to 'docs/auth')
-rw-r--r--docs/auth/README.md4
1 files changed, 2 insertions, 2 deletions
diff --git a/docs/auth/README.md b/docs/auth/README.md
index 67bcec8e0e..3737bf1823 100644
--- a/docs/auth/README.md
+++ b/docs/auth/README.md
@@ -16,9 +16,9 @@ On the other hand, the rest of authentication methods use the same types of logi
Tower will try authenticating against each enabled authentication method *in the specified order*, meaning if the same username and password is valid in multiple enabled auth methods (For example, both LDAP and TACACS+), Tower will only use the first positive match (In the above example, log a user in via LDAP and skip TACACS+).
## Notes:
-* RADIUS users and TACACS+ users are categorized as 'Enterprise' users. The following rules apply to Enterprise users:
+* SAML users, RADIUS users and TACACS+ users are categorized as 'Enterprise' users. The following rules apply to Enterprise users:
* Enterprise users can only be created via the first successful login attempt from remote authentication backend.
* Enterprise users cannot be created/authenticated if non-enterprise users with the same name has already been created in Tower.
* Tower passwords of Enterprise users should always be empty and cannot be set by any user if there are enterprise backends enabled.
- * If enterprise backends (RADIUS and TACACS+ for now) are disabled, an Enterprise user can be converted to a normal Tower user by setting password field. But this operation is irreversible (The converted Tower user can no longer be treated as Enterprise user)
+ * If enterprise backends are disabled, an Enterprise user can be converted to a normal Tower user by setting password field. But this operation is irreversible (The converted Tower user can no longer be treated as Enterprise user)