From cac20c6d43b3cf61134a59ec528cb7033f42e66a Mon Sep 17 00:00:00 2001
From: Dennis Kugelmann <dennis.kugelmann@simpleclub.com>
Date: Tue, 2 Jun 2026 14:33:29 +0200
Subject: [PATCH] docs: Document `scimsession` file implicit behaviour when
 specifying domain

---
 google-cloud-run/README.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/google-cloud-run/README.md b/google-cloud-run/README.md
index 905bb80c..f4ec5b7e 100644
--- a/google-cloud-run/README.md
+++ b/google-cloud-run/README.md
@@ -58,6 +58,19 @@ The Cloud Run service for the SCIM bridge will be configured to mount volume usi
     ```sh
     gcloud secrets create scimsession --data-file=$HOME/scimsession
     ```
+> [!IMPORTANT]
+> Your `scimsession` file MUST NOT contain a `domain` field.  
+> If it contains a domain, the SCIM bridge will automatically attempt to start on port 8443 with Let's Encrypt enabled to provision an SSL certificate.
+>
+> ```diff
+> {
+>   "version": "2",
+>   ...
+>   "deviceUuid": "EXAMPLE_DEVICE_UUID",
+> - "domain": "scim.example.com"
+> }
+> ```
+
 
 > [!TIP]
 > If the file was not saved using the above suggested values, replace `$HOME/scimsession` with the actual path to the