Add config option to exclude fields from auth providers sync

1 files changed, 12 insertions, 0 deletions

diff --git a/doc/en_US/ldap-authentication.markdown b/doc/en_US/ldap-authentication.markdown
index 6d80e9db..c3445e5d 100644
--- a/doc/en_US/ldap-authentication.markdown
+++ b/doc/en_US/ldap-authentication.markdown
@@ -194,6 +194,18 @@ Just change the value of `LDAP_ACCOUNT_CREATION` to `false`:
 define('LDAP_ACCOUNT_CREATION', false);
 ```
 
+Synchronization
+---------------
+
+By default, Kanboard will synchronize all fields (role, name, email...) except the username.
+
+If you would like to change this behavior, use this config parameter:
+
+```bash
+// This example will not synchronize the fields "username" and "role" from LDAP to Kanboard.
+define('EXTERNAL_AUTH_EXCLUDE_FIELDS', 'username,role');
+```
+
 Troubleshooting
 ---------------