diff --git a/models/auth.model b/models/auth.model
index 121d9440d..bd5adc6f6 100644
--- a/models/auth.model
+++ b/models/auth.model
@@ -2,6 +2,7 @@
 --
 -- SPDX-License-Identifier: AGPL-3.0-or-later
 
+-- TODO: AuthSourceAzure and AuthSourceLdap to be removed, just use config settings!
 
 -- | AzureADv2 (Microsoft Graph) user authentication sources, parsed from application settings
 -- | Note: No host specification is needed since Azure authentication is always requested at https://graph.microsoft.com/ (Microsoft Graph API)
@@ -31,6 +32,7 @@ AuthSourceLdap
   deriving Show Eq Ord Generic
 
 
+-- TODO: define AuthenticationSource with json instances to store unique source identifiers per protocol
 -- | User authentication data fetched from external user sources
 ExternalAuth
     user      UserId