Settings docs accuracy audit: gap fixes and three new pages (#936)

* Enforce periodic user authentication

* Multi-Factor Authentication

* IPv6 minor fixes

* Delete account clarification

* Notifications, perms, and billing

* Update metrics, auto-update, lazy connections

* Settings docs audit fixes plus two new pages

* Update self-hosted notications

* rework client page and navigation

* Matching naming to product

* Coberabbit suggested fixes

* Peer Session Expiration title

* Remove dash
This commit is contained in:
Brandon Hopkins
2026-08-19 08:07:46 -07:00
committed by GitHub
parent f42c5c0882
commit b1629b1d11
28 changed files with 326 additions and 75 deletions
@@ -96,6 +96,7 @@ You can optionally restrict access to specific **distribution groups** from your
- Sessions last **24 hours** before re-authentication is required
- Optionally restrict access to specific distribution groups synced from your IdP
- When no groups are selected, any authenticated user in your organization can access the service
- Users who are blocked or still [pending approval](/manage/team/approve-users) in NetBird are denied access even after successfully authenticating with the IdP
<Note>
**Self-hosted deployments:** SSO authentication uses whichever OIDC provider is configured in your management server. If you use the built-in embedded IdP, SSO works automatically. If you use an external identity provider (Auth0, Okta, Keycloak, etc.) without the embedded IdP, you must register the reverse proxy callback URL with your IdP before SSO will work. See the [Enable Reverse Proxy migration guide](/selfhosted/migration/enable-reverse-proxy#configure-sso-for-external-identity-providers) for step-by-step instructions.
@@ -17,6 +17,10 @@ Before using `netbird expose`, make sure:
- The **Peer Expose** feature is enabled by your account administrator (see [Enable peer expose](#enable-peer-expose) below).
- If peer group restrictions are configured, your peer must be in one of the allowed groups.
<Note>
`netbird expose` requires inbound connections: if [Block Inbound Connections](/client/block-inbound-connections) is enabled on the peer, the command fails until you disable that setting.
</Note>
## Enable peer expose
An account administrator must enable peer expose before any peer can use the `netbird expose` command.