Configure Asgardeo as an External Identity Provider (IdP)¶

Asgardeo is an identity-as-a-service (IDaaS) that is designed to create seamless login experiences for your apps. Asgardeo seamlessly integrates with Choreo, offering powerful API access control. This control hinges on the use of API scopes. That is, it enables the restriction of access to a designated group of users. Choreo allows you to bring your user stores in Asgardeo as an external IdP and provide API access control. This document guides you step-by-step to configure Asgardeo AD as your external IdP.

Prerequisites¶

Before you try out this guide, be sure you have the following:

Create an Asgardeo application by following the Asgardeo guide: Register a Standard-based Application
Find the well-known URL Click on the info tab of your application to view the endpoints and copy the Discovery endpoint.
Find the Client ID: Click on the info tab of your application to view the endpoints and copy the Client ID.

Add Asgardeo as an external IdP in Choreo¶

Follow the steps below to add Asgardeo as an external IdP in Choreo:

Sign in to the Choreo Console at https://console.choreo.dev/.
In the left navigation menu, click Settings.
In the header, click the Organization list. This will open the organization level settings page.
On the Application Security tab, click Identity Providers and then click + Identity Provider.
Select Asgardeo as the Identity Provider.
Provide a name and a description for the IdP.
Enter the Well-Known URL of your Asgardeo instance. You copied this in the prerequisites.
Leave the Apply to all environments checkbox selected. However, if you want to restrict the use of the external IdP to a certain environment, you can select them from the Environments list.
Click Next.