ShelfSSOProvider
Defined in: packages/auth/src/engine.ts:179
One domain-routed SSO login method (OIDC, SAML, or both).
Properties
Section titled “Properties”domain
Section titled “domain”domain:
string
Defined in: packages/auth/src/engine.ts:185
Email domain routing key (e.g. “acme.example”).
groups?
Section titled “groups?”
optionalgroups?:ShelfSSOGroupSync
Defined in: packages/auth/src/engine.ts:191
IdP group sync. Defaults to none (no group reads, roles untouched).
id:
string
Defined in: packages/auth/src/engine.ts:181
Stable id used in routes and descriptors (e.g. “acme-sso”).
label:
string
Defined in: packages/auth/src/engine.ts:183
Human label rendered on the login button.
optionaloidc?:ShelfSSOOidc
Defined in: packages/auth/src/engine.ts:187
OIDC connection. Defaults to none.
optionalsaml?:ShelfSSOSaml
Defined in: packages/auth/src/engine.ts:189
SAML connection. Defaults to none.