0542b29517
* docs: gender neutrality * docs: gender neutrality * docs: gender neutrality * Update docs/docs/concepts/features/identity-brokering.md Co-authored-by: Tim Möhlmann <tim+github@zitadel.com> * Update docs/docs/guides/integrate/login-ui/mfa.mdx Co-authored-by: Tim Möhlmann <tim+github@zitadel.com> * Update docs/docs/guides/integrate/login-ui/passkey.mdx Co-authored-by: Tim Möhlmann <tim+github@zitadel.com> * Update internal/static/i18n/en.yaml Co-authored-by: Tim Möhlmann <tim+github@zitadel.com> * Update internal/static/i18n/en.yaml Co-authored-by: Tim Möhlmann <tim+github@zitadel.com> --------- Co-authored-by: Tim Möhlmann <tim+github@zitadel.com>
1.6 KiB
| title | sidebar_label |
|---|---|
| Identity Brokering in ZITADEL | Identity Brokering |
What are Identity Brokering and Federated Identities?
Federated identity management is an arrangement built upon the trust between two or more domains. Users of these domains are allowed to access applications and services using the same identity. This identity is known as federated identity and the pattern behind this is identity federation.
A service provider that specializes in brokering access control between multiple service providers (also referred to as relying parties) is called an identity broker. Federated identity management is an arrangement that is made between two or more such identity brokers across organizations.
For example, if Google is configured as an identity provider in your organization, the user will get the option to use his Google Account on the Login Screen of ZITADEL. Because Google is registered as a trusted identity provider, the user will be able to login in with the Google account after the user is linked with an existing ZITADEL account (if the user is already registered) or a new one with the claims provided by Google.
How to use external identity providers in ZITADEL
Configure external identity providers on the instance level or just for one organization via the Console or ZITADEL APIs.
You will find detailed integration guides for many Identity Providers in our docs. ZITADEL also provides templates to configure generic identity providers, which don't have templates.