OAuth and OIDC Support in Fides

OAuth and OIDC support in Fides is still in beta. Some features may be incomplete, but the experience should be stable.

Fides supports OAuth and OIDC for login for simpler user access control management in larger organizations.

Supported integrations

Fides currently supports integrations with Okta, Google Workspace, and Azure Active Directory. You can also configure an integration with other services by providing additional connection information.

Configuration

Follow the steps below to start the integration process, then follow the links for each provider to complete the setup.

1. Log in to Fides and navigate to the "Settings > About Fides" page.

2. Turn on the beta features "Organization management" and "Sso authentication".

3. Navigate to "Settings > Organization"

4. Click "Add SSO Provider" and select your provider.

5. Follow the links below for instructions on configuring each supported provider.

• Okta
• Google Workspace
• Azure AD
• Custom provider (coming soon!)

Limitations

There are a few limitations to be aware of when configuring OIDC for login in Fides.

• There is no CLI login support yet. Users of the CLI will still need a username and password to authenticate from the CLI.
• Fides does not yet support any type of automatic user provisioning. Users must still be created and assigned roles from Fides before they can login using one of the supported providers.
• Any custom login provider must include the email_verified claim in the OIDC response.