This release connects identity providers through OpenID Connect. The table says, for each provider, exactly how far it has been tested. A provider is listed as tested only when we have tested it ourselves.
Where each provider stands
| Provider | Connects through | Where it stands | Guide |
|---|---|---|---|
| Keycloak | OpenID Connect | Tested by us on Keycloak 26.4, on a test installation. What the test covered is listed below. | Connect Keycloak |
| Microsoft Entra ID | OpenID Connect | Offered in the settings. Not tested by us. No step-by-step guide. | Set Up Single Sign-On |
| Okta | OpenID Connect | Offered in the settings. Not tested by us. No step-by-step guide. | Set Up Single Sign-On |
| Red Hat build of Keycloak | OpenID Connect | Offered in the settings. Not tested by us. No step-by-step guide. | Set Up Single Sign-On |
| Any other OpenID Connect provider | OpenID Connect | Offered in the settings as Other (OpenID Connect). Not tested provider by provider; the connection test shows whether yours works. | Connect Another OpenID Connect Provider |
What the Keycloak test covered: adding, testing and enabling a connection; signing in with the policy on Optional; linking an existing account; refusing a person who had not been invited; requiring single sign-on with a recovery person; and refusing a password once it was required.
Whatever your provider, "Test connection" shows what it actually sends before anyone depends on it. The test signs nobody in.
Not available in this release
SAML connections are not available. Providers that connect only through SAML cannot be connected in this release:
- Google Workspace
- AWS IAM Identity Center
Also not in this release:
- Creating or removing members from your provider's directory. You invite and remove people in Tamaat. See Remove Someone's Access.
- Signing out at your provider. Signing out of Tamaat ends your Tamaat session only.
- Signing in to Tamaat with a directory password. People sign in at your identity provider, never by typing a directory password into Tamaat.