Provider
A provider is an OAuth or OIDC identity provider that users can authenticate through. Auth supports multiple external providers alongside its own internal authentication.
Supported Providers
Auth integrates with Google, Microsoft, and GitHub through the Goth library. Each provider is configured with an issuer URL, allowed audiences, and branding assets.
Provider Types
| Type | Purpose |
|---|---|
| Internal | Auth's own email and password authentication |
| External | Third party OAuth/OIDC providers |
Branding
Providers carry visual properties for the login experience including a banner image, logo, and button text. This allows the login portal to display provider specific branding when presenting authentication options to the user.
Organization Providers
Each organization configures its own provider settings including OAuth client ID, client secret, and redirect behavior. This means different tenants can authenticate through different identity providers or the same provider with different credentials.
Flow
When a user selects a provider on the login page, Auth redirects them to the provider's authorization endpoint. After the user authenticates, the provider redirects back to Auth with an authorization code. Auth exchanges the code for tokens, resolves or creates the user's external identity, and issues a Samna JWT.