diff --git a/docs/source/administrator/authentication.md b/docs/source/administrator/authentication.md
index 8a410c4c21..ca199aa6a2 100644
--- a/docs/source/administrator/authentication.md
+++ b/docs/source/administrator/authentication.md
@@ -444,11 +444,9 @@ hub:
       username_claim: preferred_username
       userdata_params:
         state: state
-      # In order to use keycloak client's roles as authorization layer
-      claim_groups_key: roles
-      allowed_groups:
-        - user
-      admin_groups:
+      # Allow all Keycloak users
+      allow_all: true
+      admin_users:
         - admin
     JupyterHub:
       authenticator_class: generic-oauth