Skip to content

Commit

Permalink
chore(docs): Add troubleshooting details for users with 200+ security…
Browse files Browse the repository at this point in the history
… groups (#2531)
  • Loading branch information
hnrkndrssn authored Sep 25, 2024
1 parent c830cb2 commit e1ec489
Showing 1 changed file with 13 additions and 0 deletions.
13 changes: 13 additions & 0 deletions src/pages/docs/security/authentication/azure-ad-authentication.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -311,6 +311,19 @@ Sometimes the contents of the security token sent back by Microsoft Entra ID are

5. Octopus uses most of the data to validate the token but primarily uses the **sub**, **email**, and **name** claims. If these claims are not present, you will likely see unexpected behavior.

### EntraID Users with 200+ security groups

:::div{.hint}

If a user has more than 200 security groups assigned we need to retrieve the user's security groups using the Graph API, this requires the `aio` claim to be present in the `id token` we send to the Graph API.

If this claim is missing, check the following:

- You don't have any wildcards `*` in the **Redirect URI**.
- You have enabled `ID Tokens` in the **App Registration**.

:::

### Contact Octopus Support

If you aren't able to resolve the authentication problems yourself using these troubleshooting tips, please reach out to our [support team](https://octopus.com/support) with:
Expand Down

0 comments on commit e1ec489

Please sign in to comment.