From cc564833e906785723bfaec8725a6c0c54decfdc Mon Sep 17 00:00:00 2001
From: Nic Klaassen <nic@goteleport.com>
Date: Fri, 28 Jul 2023 11:07:56 -0700
Subject: [PATCH] docs: document strings.split for Login Rules (#29718)

This commit documents the `strings.split` helper function for Login
Rules added in https://github.com/gravitational/teleport.e/pull/1902
---
 .../access-controls/login-rules/reference.mdx | 41 +++++++++++++++++++
 1 file changed, 41 insertions(+)

diff --git a/docs/pages/access-controls/login-rules/reference.mdx b/docs/pages/access-controls/login-rules/reference.mdx
index bc85f3cccb85c..a70158ddd6281 100644
--- a/docs/pages/access-controls/login-rules/reference.mdx
+++ b/docs/pages/access-controls/login-rules/reference.mdx
@@ -586,6 +586,47 @@ Expression | Result
 `strings.replaceall(set("user-name"), "-", "_")` | `("user_name")`
 `strings.replaceall(set("user-alice", "user-bob"), "user-", "")` | `("alice", "bob")`
 
+### `strings.split`
+
+<Admonition type="note">
+The `strings.split` helper was introduced in Teleport v13.3.0. All Auth Service
+instances must be running this version or greater before it can be used.
+</Admonition>
+
+#### Signature
+
+```go
+func strings.split(input set, separator string) set
+```
+
+#### Description
+
+`strings.split` splits each element of `input` at each match of `separator` and
+returns a set containing the union of all split strings.
+This may be useful when an IdP does not have the ability to pass multi-valued
+claims, a Login Rule with this helper function can split a single claim value
+into a Teleport trait with multiple values.
+
+#### Arguments
+
+Argument | Type | Description
+-------- | ---- | -----------
+`input` | `set` | set of input strings which should be split |
+`sep` | `string` | literal string separator |
+
+#### Returns
+
+Type | Description
+---- | ----------
+`set`  | the union of all split strings |
+
+#### Examples
+
+Expression | Result
+------- | ------
+`strings.split(set("alice,bob,charlie"), ",")` | `("alice", "bob", "charlie")`
+`strings.split(set("devs security"), " ")` | `("devs", "security")`
+
 ### `email.local`
 
 <Admonition type="note">