32 ms·
> are there any features you would want OpenZiti to have One thing I'm not seeing in docs is a way to use existing third-party identity systems (such as Okta,
by heywoodlh 4y ago
> are there any features you would want OpenZiti to have
One thing I'm not seeing in docs is a way to use existing third-party identity systems (such as Okta, LDAP, Google Oauth, etc.). Does OpenZiti have a way to use external identities? As an example, with Buzzfeed SSO, I can expose an HTTP application to the world, but limit who can actually access it (such as my brother who can use his Gmail to authenticate to certain services I have shared with him).
- PLG88 4y agoHere is a blog too on external IdP for OpenZiti - https://blog.openziti.io/openziti-authentication-api-integrations https://blog.openziti.io/openziti-authentication-api-integra...
- dovholuknf 4y agoThe short answer is "probably". It depends on what you are doing, how you're doing it etc. But I think you might be looking for something like this? https://openziti.github.io/docs/core-concepts/security/authentication/external-jwt-signers/ https://openziti.github.io/docs/core-concepts/security/authe... Also we have already support 3rd party CAs too. It's a complex topic though so "it depends" is probably the best answer.