grafana/docs/sources/auth/team-sync.md
Diana Payton 0d3d8edb92
Docs: Refactored Enterprise side menu (#22189)
* Refactored Enterprise side menu

* Update menu.yaml

* Fixed links

* Update menu.yaml
2020-02-14 09:34:39 -08:00

1.5 KiB

+++ title = "Team Sync" description = "Grafana Team Sync" keywords = ["grafana", "auth", "documentation"] aliases = ["/docs/grafana/latest/auth/saml/"] type = "docs" [menu.docs] name = "Team Sync" parent = "authentication" weight = 5 +++

Team sync

With the Team Sync it's possible to setup synchronization between your auth providers teams and teams in Grafana. This enables LDAP or GitHub OAuth users which are members of certain teams/groups to automatically be added/removed as members to certain teams in Grafana. Currently the synchronization will only happen every time a user logs in, unless LDAP is used together with active background synchronization that was added in Grafana 6.3.

{{< docs-imagebox img="/img/docs/enterprise/team_members_ldap.png" class="docs-image--no-shadow docs-image--right" max-width= "600px" >}}

Grafana keeps track of all synchronized users in teams and you can see which users have been synchronized in the team members list, see LDAP label in screenshot. This mechanism allows Grafana to remove an existing synchronized user from a team when its LDAP group membership (for example) changes. This mechanism also enables you to manually add a user as member of a team and it will not be removed when the user signs in. This gives you flexibility to combine LDAP group memberships and Grafana team memberships.

Team Sync is only available in Grafana Enterprise. For more information, refer to [Team sync]({{< relref "../enterprise/team-sync.md" >}}) in [Grafana Enterprise]({{< relref "../enterprise" >}}).