Merge pull request #2545 from spotify/rugvip/id

docs: clarify role of identity and SignInPage
2020-09-21 21:56:29 +02:00
parent 6f2d720a41 92510f61bb
commit b15400c141
1 changed files with 7 additions and 0 deletions
@@ -35,6 +35,13 @@ full list of providers, see the

 ### Identity - WIP

+> NOTE: Identity management and the `SignInPage` in Backstage is NOT a method
+> for blocking access for unauthorized users, that either requires additional
+> backend implementation or a separate service like Google's Identity-Aware
+> Proxy. The identity system only serves to provide a personalized experience
+> and access to a Backstage Identity Token, which can be passed to backend
+> plugins.
+
 Identity management is still work in progress, but there are already a couple of
 pieces in place that can be used.