Update Lemonldap-NG OIDC config (element-hq#17204)

Update OIDC documentation: by default Matrix doesn't query userinfo endpoint, then claims should be put on id_token.
H-Shay · May 31, 2024 · b19e2cd · b19e2cd
1 parent fe4edc1
commit b19e2cd
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/changelog.d/17204.doc b/changelog.d/17204.doc
@@ -0,0 +1 @@
+Update OIDC documentation: by default Matrix doesn't query userinfo endpoint, then claims should be put on id_token.
diff --git a/docs/openid.md b/docs/openid.md
@@ -525,6 +525,8 @@ oidc_providers:
   (`Options > Security > ID Token signature algorithm` and `Options > Security >
   Access Token signature algorithm`)
 - Scopes: OpenID, Email and Profile
+- Force claims into `id_token`
+  (`Options > Advanced > Force claims to be returned in ID Token`)
 - Allowed redirection addresses for login (`Options > Basic > Allowed
   redirection addresses for login` ) :
   `[synapse public baseurl]/_synapse/client/oidc/callback`
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		Update OIDC documentation: by default Matrix doesn't query userinfo endpoint, then claims should be put on id_token.