Skip to content

Update Anonymous userrole info #11212

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Karuna-Mendix wants to merge 2 commits into
base: development
Choose a base branch
from
Open

Update Anonymous userrole info #11212

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
79c5e6e
Update anonymous userrole info
Karuna-Mendix May 19, 2026
f210602
Update OIDC documentation on user role changes
Karuna-Mendix May 29, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 3 additions & 4 deletions content/en/docs/marketplace/platform-supported-content/modules/oidc.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -205,6 +205,7 @@ This section provides an overview of updates for the OIDC SSO module across diff

| Mendix Version | OIDC SSO Module Version | Important Migration Changes | Additional Information |
| --- | --- | --- | --- |
| 10.24.0 and above | 4.5.0 | - | `Anonymous` user role has beed removed. |
Copy link
Copy Markdown

@JaapF JaapF May 29, 2026 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe better to say 'Anonymous' module role has been removed? I'm not sure

| 10.24.0 and above | 4.4.0 | Move the `Encryption.Encryptionkey` value to the `OIDC.Encryptionkey` constant. | Dependencies on the Encryption and Nanoflow Commons modules have been removed. <br> **Issued Tokens** tab has been removed from the OIDC Client Configuration page. |
| 10.24.0 and above | 4.3.0 | - | Supporting multi-domain and sub-path. |
| 10.24.0 and above | 4.2.1 | In version 4.2.1, automatic migration of the UserCommons has been removed. | Since migration steps were removed in 4.2.1, you must upgrade to OIDC SSO version 4.2.0 first to prevent data loss. This applies to the UserCommons, if you are migrating from any version below 3.0.0, always upgrade to 4.2.0 first, then move to the latest v4.2.1. |
Expand Down Expand Up @@ -248,7 +249,7 @@ If multiple IdPs are configured in the OIDC module, the following two mechanisms
2. In this mechanism, your end users make the selection. Your app logic can use the same URL (`<your-app-url>/oauth/v2/login`) to initiate authentication. End users will first be redirected to an IdP selection page, where they can choose the IdP they want to use for authentication.

{{% alert color="info" %}}
In OIDC SSO version 4.1.0 and above, you do not have to enable anonymous users for multiple IdPs. Additionally, check whether `Anonymous` user role can be removed from the app. If your application does not require anonymous access, removing the role is recommended as a security best practice.
From version 4.5.0, the `Anonymous` user role has been removed from the module and is no longer available.
Copy link
Copy Markdown

@JaapF JaapF May 29, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

module role?

{{% /alert %}}

### Configuring Navigation{#configure-nav}
Expand Down Expand Up @@ -976,9 +977,7 @@ For more information, see the [URL](/refguide/microflow/#url) section of the *Mi

##### Steps for OIDC SSO Version v4.1.0 and above

In OIDC SSO version 4.1.0 and above, you do not have to enable anonymous users.

You can disable this setting by navigating to **Security > Anonymous users** and setting **Allow anonymous users** to **No**.
In OIDC SSO version 4.1.0 and above, you do not have to enable anonymous users. You can disable this setting by navigating to **Security > Anonymous users** and setting **Allow anonymous users** to **No**. However, from version 4.5.0 of the module, this role has been removed from the module.

1. To use the Page URL functionality, replace the content of `login.html` with the content of `login-with-mendixsso-automatically.html` (located in the `resources\mendixsso\templates` folder) and save it as `login.html`.

Expand Down