diff --git a/Client-configuration.md b/Client-configuration.md index 9434c09..00aaef1 100644 --- a/Client-configuration.md +++ b/Client-configuration.md @@ -18,7 +18,7 @@ The Principal object is an immutable map of the issuer and subject, a pairing wh ## Named administrator configuration -By default all valid users get a special Spring Security GrantedAuthority that is based on the issuer and subject of the user, such as **OIDC_2398ufe23u_https://example-idp.com/openid-connect-server/**. +By default all valid users get a special Spring Security GrantedAuthority that is based on the issuer and subject of the user, such as `OIDC_2398ufe23u_https://example-idp.com/openid-connect-server/`. To map these authorities into more useful ones like **ROLE_USER** and **ROLE_ADMIN**, you need to wire in an authorities mapper, such as the one included in the client library: