[auto] adding content to ah-docs-saml->master (#453)

Co-authored-by: Metabase Docs bot <[email protected]>

Author: github-automation-metabase

_docs/master/developers-guide/driver-changelog.md

@@ -11,6 +11,14 @@ layout: new-docs
 
 # Driver Interface Changelog
 
+## Metabase 0.57.0
+
+- `driver/field-reference-mlv2` is now deprecated, and is no longer used. Please remove your implementations.
+
+- The key `metabase.driver-api.core/qp.add.nfc-path` is now more consistently populated; other `qp.add.*` keys no
+  longer include parent column names for drivers like MongoDB -- use `qp.add.nfc-path` instead to qualify the
+  `qp.add.source-column-alias` with parent column names as needed.
+
 ## Metabase 0.56.0
 
 - Add the testing multi-method `tx/track-dataset` for shared cloud dbs to track loaded datasets for more efficient sharing.

_docs/master/embedding/embedded-analytics-js.md

@@ -164,7 +164,7 @@ For example, this will define the font, color, and size for text, color for back
 </script>
 ```
 
-For the full list of theme settings, see [Appearance](./sdk/appearance).
+For the full list of theme settings, see [Appearance](../sdk/appearance).
 
 ## Authentication
 
@@ -193,7 +193,7 @@ Note that this will not work in some browsers, or in incognito mode. We recommen
 
 To use an API key to test your embeds:
 
-1. Create an [API key](../people-and-groups/api-keys)
+1. Create an [API key](../../people-and-groups/api-keys)
 2. Add `apiKey: "YOUR_API_KEY"` to `defineMetabaseConfig()`:
 
 ```html

_docs/master/embedding/securing-embeds.md

@@ -173,7 +173,7 @@ Interactive embedding integrates with SSO ([JWT](/docs/latest/people-and-groups/
 
 - [Tables](../permissions/data)
 - [Rows](../permissions/row-and-column-security#row-level-security-filter-by-a-column-in-the-table)
-- [Columns](../permissions/row-and-column-security#custom-row-and-column-security-use-a-sql-question-to-create-a-custom-view-of-a-table)
+- [Columns](../permissions/row-and-column-security#custom-row-and-column-security-use-a-saved-question-to-create-a-custom-view-of-a-table)
 - [Other data permissions](../permissions/data), such as data download permissions or SQL access.
 
 ### Interactive embedding with SSO

_docs/master/people-and-groups/authenticating-with-jwt.md

@@ -73,7 +73,7 @@ You can configure JWT group assignments through Metabase's Admin interface, or b
 
 You can use the following environment variables to configure JTW group mappings instead of configuring them in Metabase's Admin settings:
 
-- [`MB_JWT_ATTRIBUTE_GROUPS`](../configuring-metabase/environment-variables#mb_jwt_attribute_groups) to specify the key to retrieve the JWT user's groups;
+- [`MB_JWT_ATTRIBUTE_GROUPS`](../configuring-metabase/environment-variables#mb_jwt_attribute_groups) to specify the key to retrieve the JWT user’s groups;
 
 - [`MB_JWT_GROUP_SYNC`](../configuring-metabase/environment-variables#mb_jwt_group_sync) to turn group sync on or off (sync is off by default).
 

_docs/master/people-and-groups/authenticating-with-saml.md

@@ -167,6 +167,16 @@ So if your Metabase is served at `metabase.example.com` the logout service POST
 https://metabase.example.com/auth/sso/handle_slo
 ```
 
+### Enable SAML SLO
+
+SLO isn’t configurable from the Metabase interface. To enable it, you’ll need to set the following options using environment variables or your Metabase configuration file:
+
+- [`MB_SAML_SLO_ENABLED`](../configuring-metabase/environment-variables#mb_saml_slo_enabled) to `true`;
+- [`MB_SAML_IDENTITY_PROVIDER_URI`](../configuring-metabase/environment-variables#mb_saml_identity_provider_uri) to your IdP’s SLO endpoint;
+- [`MB_SESSION_COOKIE_SAMESITE`](../configuring-metabase/environment-variables#mb_session_cookie_samesite) to `none`.
+
+For the `MB_SESSION_COOKIE_SAMESITE` setting to work with `none`, Metabase must be served over HTTPS. Browsers like Chrome will block cookies in cross-site requests if SSL is not enabled. Without HTTPS, logout requests from your IdP (such as Okta) won’t include the session cookie, which means Metabase won’t be able to end the session properly.
+
 ## Synchronizing group membership with your IdP
 
 This setting allows you to assign users to Metabase groups based on an attribute of your users in your IdP. This setting may not correlate to group functionality provided by your IdP; you may need to create a separate user attribute to set people's Metabase groups, like `metabaseGroups`.

_docs/master/permissions/embedding.md

@@ -77,7 +77,7 @@ To keep A and C from viewing the `Insights` column, you can add [column-level se
    ```
 
 5. Save the SQL question as "Customer Metrics".
-6. [Add row and column security](./row-and-column-security#custom-row-and-column-security-use-a-sql-question-to-create-a-custom-view-of-a-table) using the "Metrics-Only Tenants" group and "Customer Metrics" SQL question.
+6. [Add row and column security](./row-and-column-security#custom-row-and-column-security-use-a-saved-question-to-create-a-custom-view-of-a-table) using the "Metrics-Only Tenants" group and "Customer Metrics" SQL question.
 
 When, for example, Tenant A logs in, they'll only see the `Tenant_ID` and `Metrics` columns, and only the rows where `Tenant_ID = A`.
 

_docs/master/permissions/row-and-column-security-examples.md

@@ -18,7 +18,7 @@ redirect_from:
 [Row and column security](./row-and-column-security) let you:
 
 - [Restrict **rows**](./row-and-column-security#row-level-security-filter-by-a-column-in-the-table).
-- [Restrict **columns** (and rows)](./row-and-column-security#custom-row-and-column-security-use-a-sql-question-to-create-a-custom-view-of-a-table).
+- [Restrict **columns** (and rows)](./row-and-column-security#custom-row-and-column-security-use-a-saved-question-to-create-a-custom-view-of-a-table).
 
 ## Setup for all examples below
 

_docs/master/permissions/row-and-column-security.md

@@ -40,7 +40,7 @@ You can define up to one row and column security policy for each table/group com
 Row and column security show specific data to each person based on their [user attributes](../people-and-groups/managing#adding-a-user-attribute). You can:
 
 - [Restrict **rows**](#row-level-security-filter-by-a-column-in-the-table)
-- [Restrict **columns** and rows](#custom-row-and-column-security-use-a-sql-question-to-create-a-custom-view-of-a-table) for specific people.
+- [Restrict **columns** and rows](#custom-row-and-column-security-use-a-saved-question-to-create-a-custom-view-of-a-table) for specific people.
 
 | Goal                                           | Row (filter by a column in the table) | Custom (use a saved SQL question) |
 | ---------------------------------------------- | ------------------------------------- | --------------------------------- |
@@ -202,7 +202,7 @@ Learn more about [SQL parameters](../questions/native-editor/sql-parameters)
 
 Some Metabase permissions can conflict with row and column security to give more permissive or more restrictive data access than you intended.
 
-Say you've set up [column security](#custom-row-and-column-security-use-a-sql-question-to-create-a-custom-view-of-a-table) that hides the Email column from the Accounts table (for a particular group).
+Say you've set up [column security](#custom-row-and-column-security-use-a-saved-question-to-create-a-custom-view-of-a-table) that hides the Email column from the Accounts table (for a particular group).
 
 The Email column may get exposed to someone if:
 

_site/docs/master/developers-guide/driver-changelog.html

@@ -49,7 +49,7 @@
 <meta name="twitter:site" content="@metabase">
 
 <meta name="twitter:title" content="Driver interface changelog | Metabase Documentation">
-<meta name="twitter:description" content="Driver Interface Changelog Metabase 0.56.0   Add the testing multi-method tx/track-dataset for shared cloud dbs to track loaded datasets for more efficient sharing.   Join alias escaping has been reworked; when compiling MBQL for a join...">
+<meta name="twitter:description" content="Driver Interface Changelog Metabase 0.57.0   driver/field-reference-mlv2 is now deprecated, and is no longer used. Please remove your implementations.   The key metabase.driver-api.core/qp.add.nfc-path is now more consistently populated; other qp.add.* keys no...">
 <meta name="twitter:card" content="summary_large_image">
 <meta name="twitter:image" content="https://www.metabase.com/images/docs/docs-og.png">
 <!-- end of Twitter cards -->
@@ -59,7 +59,7 @@
 <meta property="og:type" content="article">
 <meta property="og:url" content="https://www.metabase.com/docs/master/developers-guide/driver-changelog">
 <meta name="title" property="og:title" content="Driver interface changelog | Metabase Documentation">
-<meta name="description" property="og:description" content="Driver Interface Changelog Metabase 0.56.0   Add the testing multi-method tx/track-dataset for shared cloud dbs to track loaded datasets for more efficient sharing.   Join alias escaping has been reworked; when compiling MBQL for a join...">
+<meta name="description" property="og:description" content="Driver Interface Changelog Metabase 0.57.0   driver/field-reference-mlv2 is now deprecated, and is no longer used. Please remove your implementations.   The key metabase.driver-api.core/qp.add.nfc-path is now more consistently populated; other qp.add.* keys no...">
 <meta name="image" property="og:image" content="https://www.metabase.com/images/docs/docs-og.png">
 <!-- end of Open Graph metadata -->
 
@@ -4863,6 +4863,19 @@ <h5>Other resources</h5>
 
         <h1 id="driver-interface-changelog">Driver Interface Changelog</h1>
 
+<h2 id="metabase-0570">Metabase 0.57.0</h2>
+
+<ul>
+  <li>
+    <p><code class="language-plaintext highlighter-rouge">driver/field-reference-mlv2</code> is now deprecated, and is no longer used. Please remove your implementations.</p>
+  </li>
+  <li>
+    <p>The key <code class="language-plaintext highlighter-rouge">metabase.driver-api.core/qp.add.nfc-path</code> is now more consistently populated; other <code class="language-plaintext highlighter-rouge">qp.add.*</code> keys no
+longer include parent column names for drivers like MongoDB – use <code class="language-plaintext highlighter-rouge">qp.add.nfc-path</code> instead to qualify the
+<code class="language-plaintext highlighter-rouge">qp.add.source-column-alias</code> with parent column names as needed.</p>
+  </li>
+</ul>
+
 <h2 id="metabase-0560">Metabase 0.56.0</h2>
 
 <ul>

_site/docs/master/embedding/embedded-analytics-js.html

@@ -5041,7 +5041,7 @@ <h3 id="theming">Theming</h3>
 <span class="nt">&lt;/script&gt;</span>
 </code></pre></div></div>
 
-<p>For the full list of theme settings, see <a href="./sdk/appearance">Appearance</a>.</p>
+<p>For the full list of theme settings, see <a href="../sdk/appearance">Appearance</a>.</p>
 
 <h2 id="authentication">Authentication</h2>
 
@@ -5074,7 +5074,7 @@ <h3 id="use-api-keys-to-test-embeds">Use API keys to test embeds</h3>
 <p>To use an API key to test your embeds:</p>
 
 <ol>
-  <li>Create an <a href="../people-and-groups/api-keys">API key</a></li>
+  <li>Create an <a href="../../people-and-groups/api-keys">API key</a></li>
   <li>Add <code class="language-plaintext highlighter-rouge">apiKey: "YOUR_API_KEY"</code> to <code class="language-plaintext highlighter-rouge">defineMetabaseConfig()</code>:</li>
 </ol>