website/docs: add source property mappings, rework provider property mappings (#10652)

website/docs/providers/oauth2/index.md

@@ -4,7 +4,7 @@ title: OAuth2 Provider
 
 This provider supports both generic OAuth2 as well as OpenID Connect
 
-Scopes can be configured using Scope Mappings, a type of [Property Mappings](../../property-mappings/#scope-mapping).
+Scopes can be configured using scope mappings, a type of [property mapping](../property-mappings/index.md#scope-mappings).
 
 | Endpoint             | URL                                                                  |
 | -------------------- | -------------------------------------------------------------------- |

website/docs/providers/property-mappings/expression.mdx

@@ -0,0 +1,24 @@
+---
+title: Expressions
+---
+
+The property mapping should return a value that is expected by the provider. Supported types are documented in the individual provider. Returning `None` is always accepted and would simply skip the mapping for which `None` was returned.
+
+## Available Functions
+
+import Functions from "../../expressions/_functions.md";
+
+<Functions />
+
+## Variables
+
+import Objects from "../../expressions/_objects.md";
+
+<Objects />
+
+import User from "../../expressions/_user.md";
+
+<User />
+
+-   `request`: The current request. This may be `None` if there is no contextual request. See ([Django documentation](https://docs.djangoproject.com/en/3.0/ref/request-response/#httprequest-objects))
+-   Other arbitrary arguments given by the provider, this is documented on the provider.

website/docs/providers/property-mappings/index.md

@@ -0,0 +1,13 @@
+---
+title: Provider property mappings
+---
+
+Property mappings allow you to pass information to external applications. For example, pass the current user's groups as a SAML parameter.
+
+## SAML property mappings
+
+SAML property mappings allow you embed information into the SAML authentication request. This information can then be used by the application to, for example, assign permissions to the object.
+
+## Scope mappings
+
+Scope mappings are used by the OAuth2 provider to map information from authentik to OAuth2/OpenID claims. Values returned by a scope mapping are added as custom claims to access and ID tokens.

website/docs/providers/rac/how-to-rac.md

@@ -54,7 +54,7 @@ Next, you need to add a property mapping for each of the remote machines you wan
             - **Enable font smoothing**: optional
             - **Enable full window dragging**: optional
         - Advanced settings:
-            - **Expressions**: optional, using Python you can define custom [expressions](../../property-mappings/expression.mdx).
+            - **Expressions**: optional, using Python you can define custom [expressions](../property-mappings/expression.mdx).
 
 4. Click **Finish** to save your settings and close the modal.
 

website/docs/providers/saml/index.md

@@ -2,7 +2,7 @@
 title: SAML Provider
 ---
 
-This provider allows you to integrate enterprise software using the SAML2 Protocol. It supports signed requests and uses [Property Mappings](../../property-mappings/#saml-property-mapping) to determine which fields are exposed and what values they return. This makes it possible to expose vendor-specific fields.
+This provider allows you to integrate enterprise software using the SAML2 protocol. It supports signed requests and uses [property mappings](../property-mappings/#saml-property-mappings) to determine which fields are exposed and what values they return. This makes it possible to expose vendor-specific fields.
 Default fields are exposed through auto-generated Property Mappings, which are prefixed with "authentik default".
 
 | Endpoint                  | URL                                                          |