(airflow) branch main updated: Add auth manager section in multi-team doc (#63208)

[on...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

onikolas pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git


The following commit(s) were added to refs/heads/main by this push:
     new bc6cc08d73a Add auth manager section in multi-team doc (#63208)
bc6cc08d73a is described below

commit bc6cc08d73a21f1d8065b5cf19e5f6b7d1aae967
Author: Vincent <97...@users.noreply.github.com>
AuthorDate: Thu Mar 12 12:08:52 2026 -0400

    Add auth manager section in multi-team doc (#63208)
---
 airflow-core/docs/core-concepts/multi-team.rst | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/airflow-core/docs/core-concepts/multi-team.rst b/airflow-core/docs/core-concepts/multi-team.rst
index 0f8a7205673..6beccc249b1 100644
--- a/airflow-core/docs/core-concepts/multi-team.rst
+++ b/airflow-core/docs/core-concepts/multi-team.rst
@@ -91,6 +91,27 @@ Secrets Backends are supported on a case by case basis.
 When a task requests a Variable or Connection, the secrets backend will return a team-specific value, if any. The
 backend will automatically resolve the correct value based on the requesting task's team.
 
+Auth Manager
+""""""""""""
+
+In order to use multi-team mode, the auth manager must be compatible with it. A compatible auth manager must
+implement two methods:
+
+- ``is_authorized_team``: Determines whether a user is authorized to perform a given action on a team. It is
+  used primarily to check whether a user belongs to a team.
+- ``_get_teams``: Returns the set of teams defined in the auth manager.
+
+During initialization, Airflow validates that all teams defined in the auth manager are also present in the
+Airflow metadata database. If any team is missing, Airflow will raise an error.
+
+If the auth manager you are using does not implement these methods, Airflow will raise a
+``NotImplementedError`` at runtime.
+
+Example of auth managers compatible with multi-team:
+
+- :doc:`Simple auth manager </core-concepts/auth-manager/index>` (recommended for development usage only)
+- :doc:`Keycloak auth manager <apache-airflow-providers-keycloak:auth-manager/index>`
+
 Enabling Multi-Team Mode
 ------------------------