From 682dc0566c5610a930f32d32a618bdce5e0e78a7 Mon Sep 17 00:00:00 2001 From: zlyqqq Date: Tue, 15 Aug 2017 14:54:33 +0800 Subject: [PATCH] Add explain of mapping group attribute As we use federation protocol, assign authorization to ephemeral users by mapping to groups. Setting this mapping does not add the ephemeral user to the group and the user is not a member of the group. Only authorization for the user is same as role assignments to the group on a project or domain. This patch add explain about the group mapping Change-Id: I9faa7d57037af3c2cf6ccfda8d853693fa5eb628 --- api-ref/source/v3-ext/federation.inc | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/api-ref/source/v3-ext/federation.inc b/api-ref/source/v3-ext/federation.inc index b02f973461..96b98f969a 100644 --- a/api-ref/source/v3-ext/federation.inc +++ b/api-ref/source/v3-ext/federation.inc @@ -214,7 +214,9 @@ Required attributes: ] This assigns authorization attributes, by way of role assignments on the - specified group, to ephemeral users. + specified group, to ephemeral users. The users are not added to the group, + but for the duration of the token they will receive the same authorization + as if they were. ::