diff --git a/modules/services/pinchflat/docs/default.md b/modules/services/pinchflat/docs/default.md
index 0ffc6ad..b4dcf55 100644
--- a/modules/services/pinchflat/docs/default.md
+++ b/modules/services/pinchflat/docs/default.md
@@ -32,7 +32,6 @@ shb.pinchflat = {
 
   ldap = {
     enable = true;
-    userGroup = "pinchflat_user";
   };
   sso = {
     enable = true;
@@ -44,6 +43,9 @@ shb.sops.secret."pinchflat/secretKeyBase".request = config.shb.pinchflat.secretK
 
 Secrets can be randomly generated with `nix run nixpkgs#openssl -- rand -hex 64`.
 
+The [user](#services-pinchflat-options-shb.pinchflat.ldap.userGroup)
+LDAP group is created automatically.
+
 ## Backup {#services-pinchflat-usage-backup}
 
 Backing up Pinchflat using the [Restic block](blocks-restic.html) is done like so: