Skip to content

Commit 475cfb1

Browse files
NataliaIvakinamnd999phil198renetapopova
authored
Add a note about Idp connectivity (#1329) (#1333)
Add a note to ensure the Neo4j server is able to connect to the identity provider, as this is required for operation. --------- Co-authored-by: Mark Dixon <[email protected]> Co-authored-by: Phil Wright <[email protected]> Co-authored-by: Reneta Popova <[email protected]>
1 parent ec40ad6 commit 475cfb1

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

modules/ROOT/pages/authentication-authorization/sso-integration.adoc

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -152,6 +152,11 @@ dbms.security.authentication_providers=oidc-newsso,oidc-oldsso,native
152152
dbms.security.authorization_providers=oidc-newsso,oidc-oldsso,native
153153
----
154154
======
155+
. Check connectivity.
156+
Neo4j needs to connect to the identity provider to discover settings and fetch public keys to verify tokens.
157+
Check firewall settings and security controls, and, if necessary, logs to ensure that the Neo4j server is able to connect to the identity provider using HTTPS.
158+
If a proxy is required, this can be https://docs.oracle.com/en/java/javase/17/docs/api/java.base/java/net/doc-files/net-properties.html#Proxies[configured] in the Java virtual machine using the configuration setting xref:configuration/configuration-settings.adoc#config_server.jvm.additional[server.jvm.additional].
159+
Proxies that require credentials are not supported.
155160

156161
[[auth-sso-map-idp-roles]]
157162
== Map the Identity Provider Groups to the Neo4j Roles

0 commit comments

Comments
 (0)