Identity Provider Configuration

This article describes how to configure Pomerium to use a third-party identity service for single-sign-on.

There are a few configuration steps required for identity provider integration. Most providers support OpenID Connect which provides a standardized identity and authentication interface.

In this guide we'll cover how to do the following for each identity provider:

1. Set a Redirect URL pointing back to Pomerium. For example, https://${authenticate_service_url}/oauth2/callback.
2. Generate a Client ID and Client Secret.
3. Configure Pomerium to use the Client ID and Client Secret keys.