pomerium/docs/docs/identity-providers
2020-06-22 15:21:21 -06:00
..
img docs: update service account instructions for OneLogin (#973) 2020-06-22 15:21:21 -06:00
azure.md docs: service account instructions for azure (#969) 2020-06-22 14:15:49 -06:00
cognito.md an attempt to improve the identity provider docs (#608) 2020-04-13 11:30:29 -07:00
github.md docs: update GitHub documentation for service account (#967) 2020-06-22 12:36:07 -06:00
gitlab.md docs: service account instructions for gitlab (#970) 2020-06-22 15:04:36 -06:00
google.md v0.7.0 2020-04-04 20:45:48 -07:00
okta.md docs: update okta service account docs to match new format (#972) 2020-06-22 15:04:01 -06:00
one-login.md docs: update service account instructions for OneLogin (#973) 2020-06-22 15:21:21 -06:00
readme.md v0.7.0 2020-04-04 20:45:48 -07:00

title description
Overview This article describes how to connect Pomerium to third-party identity providers / single-sign-on services. You will need to generate keys, copy these into your Pomerium settings, and enable the connection.

Identity Provider Configuration

This article describes how to configure Pomerium to use a third-party identity service for single-sign-on.

There are a few configuration steps required for identity provider integration. Most providers support OpenID Connect which provides a standardized identity and authentication interface.

In this guide we'll cover how to do the following for each identity provider:

  1. Set a Redirect URL pointing back to Pomerium. For example, https://${authenticate_service_url}/oauth2/callback.
  2. Generate a Client ID and Client Secret.
  3. Configure Pomerium to use the Client ID and Client Secret keys.