Identity providers
Email codes, Google, GitHub, and your own identity service.
Provider setup
- Open Zero Trust > Identity providers.
- Select Add identity provider.
- Select the provider type.
- Enter its credentials, if required.
- Register each displayed callback address with the provider.
- Assign the provider to an application.
- Select Save Zero Trust.
Email codes use the Loclix mail service and do not need provider credentials.
Provider selection
| Type | Required setup |
|---|---|
| OAuth web client ID and secret | |
| GitHub | OAuth app client ID and secret |
| OpenID Connect | HTTPS issuer, client ID, and secret |
| OAuth 2.0 | HTTPS authorization, token, and identity endpoints; client credentials |
Use Google's web client setup or GitHub's OAuth app registration. Add a separate GitHub app registration when a hostname needs a different callback URL.
Callback addresses
Copy the exact callback shown in the provider editor. Register each application hostname that uses the provider. Callbacks stay on that hostname.
Custom providers
OpenID Connect uses discovery and signed identity tokens. Custom OAuth needs an authenticated identity endpoint and PKCE S256 support. See the provider contract before connecting a custom service.
A blank secret retains the saved value. Enter a new secret if you change the provider, client ID, or credential endpoints.