@@ -88,7 +88,7 @@ logging>>.
88
88
====
89
89
*Details* +
90
90
In SAML, Identity Providers (IdPs) can either be explicitly configured to
91
- release a `NameID` with a specific format, or configured to attempt to conform
91
+ release a `NameID` with a specific format, or configured to attempt to conform
92
92
with the requirements of a Service Provider (SP). The SP declares its
93
93
requirements in the `NameIDPolicy` element of a SAML Authentication Request.
94
94
In {es}, the `nameid_format` SAML realm setting controls the `NameIDPolicy`
@@ -103,9 +103,9 @@ IdP. If you want to retain the previous behavior, set `nameid_format` to
103
103
104
104
*Impact* +
105
105
If you currently don't configure `nameid_format` explicitly, it's possible
106
- that your IdP will reject authentication requests from {es} because the requests
106
+ that your IdP will reject authentication requests from {es} because the requests
107
107
do not specify a `NameID` format (and your IdP is configured to expect one).
108
- This mismatch can result in a broken SAML configuration. If you're unsure whether
108
+ This mismatch can result in a broken SAML configuration. If you're unsure whether
109
109
your IdP is explicitly configured to use a certain `NameID` format and you want to retain current behavior
110
110
, try setting `nameid_format` to `urn:oasis:names:tc:SAML:2.0:nameid-format:transient` explicitly.
111
111
====
@@ -347,4 +347,19 @@ cache do not expire.
347
347
To override the defaults, configure the `script.cache.max_size`,
348
348
`script.max_compilations_rate`, and `script.cache.expire` settings.
349
349
====
350
+
351
+ .Attempting to store nanosecond resolution in a `date` field is deprecated.
352
+ [%collapsible]
353
+ ====
354
+ *Details* +
355
+ Attempting to store a nanosecond resolution in a {ref}/date.html[`date`] field is deprecated.
356
+ While previously allowed, these attempts always resulted in resolution loss.
357
+ A `date` field can only store up to millisecond resolutions.
358
+
359
+ *Impact* +
360
+ If you attempt to store a nanosecond resolution in a `date` type field, {es} will
361
+ emit a deprecation warning. To avoid deprecation warnings, use a
362
+ {ref}/date_nanos.html[`date_nanos`] field instead.
363
+ ====
364
+
350
365
// end::notable-breaking-changes[]
0 commit comments