From 509db870450a87c64047c1f0b9c3677fce3bf0d9 Mon Sep 17 00:00:00 2001 From: Karuna Vengurlekar Date: Thu, 3 Sep 2026 14:35:03 +0530 Subject: [PATCH] Add constant --- .../marketplace/platform-supported-content/modules/oidc.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/content/en/docs/marketplace/platform-supported-content/modules/oidc.md b/content/en/docs/marketplace/platform-supported-content/modules/oidc.md index 47d3bf0d3bc..6c27e7aced0 100644 --- a/content/en/docs/marketplace/platform-supported-content/modules/oidc.md +++ b/content/en/docs/marketplace/platform-supported-content/modules/oidc.md @@ -203,6 +203,7 @@ This section provides an overview of updates for the OIDC SSO module across diff | Mendix Version | OIDC SSO Module Version | Important Migration Changes | Additional Information | | --- | --- | --- | --- | +| 10.24.0 and above | 4.x.x | - | New constant (`GlobalUserProvisioningMicroflow`) has been introduced. It specifies the qualified name of the global user-provisioning microflow that runs after login. | | 10.24.0 and above | 4.7.0 | - | A new constant (`EnableAudienceValidation`) has been introduced for API security. Because it is enabled by default, you need to configure the **Resource path** and **Expected audience** value. You can disable audience validation, but Mendix does not recommend this. | | 10.24.0 and above | 4.6.0 | - | New constant (`OIDC.NonceCookieSameSite`) has been introduced. | | 10.24.0 and above | 4.5.0 | - | New Admin UI and new constants have been introduced. | @@ -766,6 +767,8 @@ By default, the `CUSTOM_UserProvisioning` microflow in the **USE_ME** > **1. Con Do not change the `UserProvisioning_StandardOIDC` microflow. This may cause problems if you upgrade to a newer version of the OIDC SSO module. Apply customizations to the `CUSTOM_UserProvisioning` microflow only. {{% /alert %}} +From version xx.xx.xx of the module, the `GlobalUserProvisioningMicroflow` constant specifies the qualified name (`Module.Microflow`) of the global user-provisioning microflow that runs after login. The default value is `OIDC.CUSTOM_UserProvisioning`. The module calls this microflow dynamically, so you can substitute your own flow without modifying the OIDC module. The target microflow must accept an OAuthToken parameter of type `OIDC.Token` and return a `System.User` object. + #### User Provisioning Using a Microflow{#custom-provisioning-mf} {{% alert color="warning" %}}