Skip to content

Commit 625eaef

Browse files
add version tag
1 parent d0dafa6 commit 625eaef

File tree

2 files changed

+7
-3
lines changed

2 files changed

+7
-3
lines changed

modules/ROOT/pages/database-administration/aliases/manage-aliases-standard-databases.adoc

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -387,8 +387,11 @@ Instead, they are assigned the version given by xref:configuration/configuration
387387
Alternatively, you can specify the version in the `CREATE ALIAS` or `ALTER ALIAS` commands.
388388
See xref:database-administration/aliases/manage-aliases-standard-databases.adoc#set-default-language-for-remote-database-aliases[] and xref:database-administration/aliases/manage-aliases-standard-databases.adoc#alter-default-language-remote-database-alias[] for more information.
389389

390-
When creating a remote database alias, the credentials used to target to the remote DBMS need to be specified. This can be done by providing the credentials of a native user, or
391-
by forwarding the OIDC credentials of the user logged in to the local DBMS.
390+
When creating a remote database alias, the credentials used to target to the remote DBMS need to be specified and can be either:
391+
392+
* `STORED NATIVE CREDENTIALS`, i.e. the credentials of a single user on the remote DBMS.
393+
* `OIDC CREDENTIAL FORWARDING`, i.e. passing the bearer authentication token from the user logged in through SSO and who issues the query. Introduced in 2025.10
394+
by forwarding the OIDC credentials of the user logged in to the local DBMS. label:new[Introduced in 2025.10]
392395

393396
To use the credentials of a native user on the remote DBMS, `USER` and `PASSWORD` need to be set when creating the alias.
394397

modules/ROOT/pages/database-administration/aliases/remote-database-alias-configuration.adoc

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ A remote alias defines:
2323
When creating the remote database alias, it can be configured to authenticate with either:
2424

2525
* `STORED NATIVE CREDENTIALS`, i.e. the credentials of a single user on the remote **DBMS B**.
26-
* `OIDC CREDENTIAL FORWARDING`, i.e. passing the bearer authentication token from the user who issues the query. In order to use this method to authenticate, the local *DBMS A* and remote *DBMS B* needs to have SSO authentication and authorization through identity providers implementing the OIDC standard configured, see the xref:authentication-authorization/sso-integration.adoc[SSO integration] on how to configure OIDC identity providers.
26+
* `OIDC CREDENTIAL FORWARDING`, i.e. passing the bearer authentication token from the user logged in through SSO and who issues the query. label:new[Introduced in 2025.10]
2727
2828
2929
[[setup-example-stored-native-credentials]]
@@ -200,6 +200,7 @@ If there is a failure when reading the keystore file, investigate the `debug.log
200200
In case it is not possible to connect to the remote alias after its creation, verify its settings by connecting to the remote database at https://browser.neo4j.io/ or at your local browser.
201201
====
202202

203+
[role=label--new-2025.10]
203204
[[setup-example-credential-forwarding]]
204205
== Setup example with OIDC credential forwarding
205206

0 commit comments

Comments
 (0)