diff --git a/README.md b/README.md
index 6747a87d1fcdb925e5bae32424e6fa7fcfff6fd2..734ddd8ac41799920d6ecdd4a93fa5e39590f8a9 100644
--- a/README.md
+++ b/README.md
@@ -55,7 +55,7 @@ The following services are defined via docker compose files.
 
 ### shibauth
 
-* based on the external unicon/shibboleth-sp:3.0.4 Apache + Shibboleth image
+* based on the external unicon/shibboleth-sp:3.0.4 Apache + Shibboleth SP3 image
 * provides authentication and authorization via SAML2
 * docker configuration files set access control rules
 * traefik labels determine which services are protected via Shib
diff --git a/documentation/operator-guide/index.rst b/documentation/operator-guide/index.rst
index 249dfe69a680b8d7b323f4a674e9d65de7a1ec11..4aa4e923c76cd5fcb41800e9118066d60bcbf656 100644
--- a/documentation/operator-guide/index.rst
+++ b/documentation/operator-guide/index.rst
@@ -12,6 +12,7 @@ View Server - Operator Guide
    configuration
    management
    ingestion
+   access
 
 ..
    Indices and tables
diff --git a/documentation/operator-guide/ingestion.rst b/documentation/operator-guide/ingestion.rst
index 8efdac7515d617a3307cfeac3509406157174147..f81dfee0976df49914dd492631d06bedcc230afb 100644
--- a/documentation/operator-guide/ingestion.rst
+++ b/documentation/operator-guide/ingestion.rst
@@ -292,4 +292,6 @@ The preprocessing step aims to ensure that cloud optimized GeoTIFF (COG) files a
 
 - If data are already in COGs and in favorable projection, which will be presented to the user for most of the times, direct registration should be used. This means, paths to individual products will be pushed directly to the register queues.
 
-- Also for cases, where preprocessing step would take too much time, direct registration allowing access to the metadata and catalog functions, while justifying slower rendering times can be preferred.
\ No newline at end of file
+- Also for cases, where preprocessing step would take too much time, direct registration allowing access to the metadata and catalog functions, while justifying slower rendering times can be preferred.
+
+Next chapter :ref:`access` describes used authorization and authentication concepts and lines out how the external access to individual components and service as such is configured.
\ No newline at end of file
diff --git a/documentation/operator-guide/intro.rst b/documentation/operator-guide/intro.rst
index 3ee54989f7b75e516c1385b080225ac8247dfa6a..6e8184953e672efa72ed24cd507b58f932a80b93 100644
--- a/documentation/operator-guide/intro.rst
+++ b/documentation/operator-guide/intro.rst
@@ -32,6 +32,9 @@ respective Docker image in parenthesis):
 - Database (postgis)
 - Queue Manager (redis)
 - Log collector (fluentd)
+- Kibana (kibana)
+- Elasticsearch (elasticsearch)
+- Shibboleth SP3 (unicon/shibboleth-sp)
 
 These services are bundled and managed together in a Docker Swarm via
 Docker Compose configuration files.
@@ -50,15 +53,17 @@ the used images:
 
 - mdillon/postgis:10
 - redis
-- traefik:2.1
-- elasticsearch:7.9.0 
-- kibana:7.9.0  
+- traefik
+- elasticsearch
+- kibana
+- unicon/shibboleth-sp
 - atmoz/sftp
-- registry.gitlab.eox.at/esa/prism/vs/fluentd:latest
-- registry.gitlab.eox.at/esa/prism/vs/pvs_core:latest
-- registry.gitlab.eox.at/esa/prism/vs/pvs_cache:latest
-- registry.gitlab.eox.at/esa/prism/vs/pvs_preprocessor:latest
-- registry.gitlab.eox.at/esa/prism/vs/pvs_client:latest
+- registry.gitlab.eox.at/esa/prism/vs/fluentd
+- registry.gitlab.eox.at/esa/prism/vs/pvs_core
+- registry.gitlab.eox.at/esa/prism/vs/pvs_cache
+- registry.gitlab.eox.at/esa/prism/vs/pvs_preprocessor
+- registry.gitlab.eox.at/esa/prism/vs/pvs_client
+- registry.gitlab.eox.at/esa/prism/vs/pvs_ingestor
 
 Configuration Files
 -------------------