From 92510f61bb44c442ba62b4669794b92e60f136c6 Mon Sep 17 00:00:00 2001
From: Patrik Oldsberg <poldsberg@gmail.com>
Date: Mon, 21 Sep 2020 20:51:37 +0200
Subject: [PATCH] docs: clarify role of identity and SignInPage

---
 docs/auth/index.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/docs/auth/index.md b/docs/auth/index.md
index 0fa8de3280..aed3a580b0 100644
--- a/docs/auth/index.md
+++ b/docs/auth/index.md
@@ -35,6 +35,13 @@ full list of providers, see the
 
 ### Identity - WIP
 
+> NOTE: Identity management and the `SignInPage` in Backstage is NOT a method
+> for blocking access for unauthorized users, that either requires additional
+> backend implementation or a separate service like Google's Identity-Aware
+> Proxy. The identity system only serves to provide a personalized experience
+> and access to a Backstage Identity Token, which can be passed to backend
+> plugins.
+
 Identity management is still work in progress, but there are already a couple of
 pieces in place that can be used.