Add federated login

Asgardeo lets you add and configure external Identity Providers (IdP) so that users can bring their identities in these external IdPs and log in to applications. Follow the guides below to learn how you can integrate the external IdP of your choice with Asgardeo.

Create a connection

You can register an external IdP in Asgardeo by creating a connection. Asgardeo supports a variety of connections for your convenience. Select your preferred connection and follow the guide to learn how to configure it.

Facebook Github Google Apple Microsoft OpenID Connect SAML
Sign-in with Ethereum

Configure JIT provisioning

When a user logs in with an external identity provider using the same email address registered in a local account, JIT-provisioning overrides the attributes of the local account with the attributes received from the external identity provider.

Asgardeo, by default, enables Just-In-Time (JIT) user provisioning for your external identity provider.

To disable JIT-provisioning,

1. On the Asgardeo Console, click Connections and select the relevant connection.

2. Go to the Just-in-Time Provisioning tab of the selected connection.

3. Check/Uncheck the Just-in-Time (JIT) User Provisioning checkbox to enable/disable it.

   

4. Click Update to save the changes.

Note

• Learn more about JIT provisioning configurations in configure JIT user provisioning.

• You can use the identity provider APIs to customize the attribute syncing behavior between the external identity provider and Asgardeo.

Map groups with Asgardeo

Map local attributes to external attributes

Follow the steps below to map attributes of Asgardeo with that of a connection.

1. On the Asgardeo Console, go to Connections.

2. Select your connection and go to its Attributes tab.

3. Click Add Attribute Mapping to add a new attribute mapping.

   

4. Enter the External IdP Attribute of the connection and map it to the Groups attribute of Asgardeo.

   

5. Click Add Attribute Mapping and then click Save.

   

6. Click Update to save the changes.

   

Add groups to connections

Follow the steps below to add the groups from your connection to Asgardeo:

1. On the Asgardeo Console, go to Connections.
2. Select your connection and go to its Groups tab.

3. Click New Group and enter the group name. Be sure to enter the exact group name that will be returned from the connection.

   

4. Click Finish to add the group information.

Delete a connection

Before you begin

If your connection has applications associated with it, you will not be able to delete the connection.

Before deleting such connections:

1. Check the associated applications from the Connected Apps tab of the connection.
2. Click on an application that uses the connection and you will be redirected to the Login Flow tab of the respective application.
3. Remove the connection from the sign-in flow of the associated applications.
4. Repeat steps 2 and 3 for all listed applications.
5. Proceed to delete the connection.

To delete a connection:

1. On the Asgardeo Console, go to Connections.
2. Click Set up and navigate to the General tab.

3. At the bottom of the page, click the button in the Delete connection.

   Note

   You cannot delete connections that are available by default.

4. Select the checkbox and confirm your action.