Skip to content
Open
Show file tree
Hide file tree
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -821,6 +821,9 @@ ID attribute
.. note::
If a user's ID Attribute changes, a new Mattermost account is created that is not associated with the previous account. If you need to change this field after users have signed-in, use the :ref:`mmctl ldap idmigrate <administration-guide/manage/mmctl-command-line-tool:mmctl ldap idmigrate>` command.

.. note::
The ID attribute value is matched verbatim - Mattermost applies no case normalization. With PostgreSQL's default case-sensitive collation, a change in casing is treated as a new user and a separate account is created. Ensure your AD/LDAP server returns this attribute with consistent casing.

.. config:setting:: login-id-attribute
:displayname: Login ID attribute (AD/LDAP > Account Synchronization)
:systemconsole: Authentication > AD/LDAP
Expand Down Expand Up @@ -1029,6 +1032,9 @@ Group ID attribute
.. note::
This attribute is only used when AD/LDAP Group Sync is enabled and it is **required**. See the :doc:`AD/LDAP Group Sync documentation </administration-guide/onboard/ad-ldap-groups-synchronization>` for more information.

.. note::
The Group ID attribute value is matched verbatim - Mattermost applies no case normalization. With PostgreSQL's default case-sensitive collation, a change in casing means Mattermost no longer recognizes the previously synced group and treats it as a new, unlinked group. Ensure your AD/LDAP server returns this attribute with consistent casing.

Synchronization performance
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Expand Down Expand Up @@ -1555,6 +1561,9 @@ Id attribute
| String input. | - Environment variable: ``MM_SAMLSETTINGS_IDATTRIBUTE`` |
+----------------------------------------------------------------------------------------------------------------------+--------------------------------------------------------------+

.. note::
The ID attribute value is matched verbatim - Mattermost applies no case normalization. With PostgreSQL's default case-sensitive collation, a change in casing is treated as a new user and a separate account is created. Ensure your identity provider returns this attribute with consistent casing.

.. config:setting:: guest-attribute
:displayname: Guest attribute (SAML)
:systemconsole: Authentication > SAML 2.0
Expand Down
Loading
Loading