authenticators: add explanations on each configuration tabs (#68804)

src/authentic2/apps/authenticators/models.py

@@ -166,6 +166,8 @@ class AddRoleAction(AuthenticatorRelatedObjectBase):
     condition = models.CharField(_('Condition (unused)'), editable=False, max_length=256, blank=True)
     mandatory = models.BooleanField(_('Mandatory (unused)'), editable=False, default=False)
 
+    description = _('Add roles to users on successful login.')
+
     class Meta:
         default_related_name = 'add_role_actions'
         verbose_name = _('Add a role')

src/authentic2/apps/authenticators/templates/authentic2/authenticators/authenticator_detail.html

@@ -52,6 +52,7 @@
         </div>
         {% for model, objects in object.related_models.items %}
           <div aria-labelledby="tab-{{ model.model_name }}" hidden="" id="panel-{{ model.model_name }}" role="tabpanel" tabindex="0">
+            <p>{{ model.description }}</p>
             {% include 'authentic2/authenticators/related_object_list.html' with object_list=objects model_name=model.model_name %}
           </div>
         {% endfor %}

src/authentic2_auth_oidc/models.py

@@ -258,6 +258,8 @@ class OIDCClaimMapping(AuthenticatorRelatedObjectBase):
 
     objects = managers.OIDCClaimMappingManager()
 
+    description = _('Set user fields using claims.')
+
     class Meta:
         default_related_name = 'claim_mappings'
         verbose_name = _('Claim')

src/authentic2_auth_saml/models.py

@@ -220,6 +220,10 @@ class SAMLAttributeLookup(AuthenticatorRelatedObjectBase):
     saml_attribute = models.CharField(_('SAML attribute'), max_length=1024)
     ignore_case = models.BooleanField(_('Ignore case'), default=False)
 
+    description = _(
+        'Define which attributes are used to establish the link with an identity provider account.'
+    )
+
     class Meta:
         default_related_name = 'attribute_lookups'
         verbose_name = _('Attribute lookup')
@@ -252,6 +256,8 @@ class SetAttributeAction(AuthenticatorRelatedObjectBase):
     saml_attribute = models.CharField(_('SAML attribute name'), max_length=1024)
     mandatory = models.BooleanField(_('Mandatory'), default=False, help_text=_('Deny login if action fails.'))
 
+    description = _('Set user fields using received SAML attributes.')
+
     class Meta:
         default_related_name = 'set_attribute_actions'
         verbose_name = _('Set an attribute')