SSO Configuration
Configure Single Sign-On for portal login via OIDC, GitHub OAuth, or AWS OIDC.
Using an AI assistant? Give it this file.
/llms.md is a single Markdown file covering installation, configuration, quickstart, clients, upstreams, permissions, TLS, and production deployment. Copy it and paste it into your AI chat, or tell the AI to fetch https://drevnix.tech/llms.md.
SSO Configuration
Drevnix supports Single Sign-On for portal login, letting your team authenticate with your existing identity provider instead of managing separate Drevnix passwords.
SSO is configured through the Settings page and takes effect immediately. No restart required. SSO availability is controlled by your license.
Supported providers
| Provider | Type |
|---|---|
| Any OIDC-compliant IdP (Okta, Keycloak, Auth0, Ping, etc.) | Generic OIDC |
| GitHub | GitHub OAuth |
| AWS | AWS OIDC |
You can configure multiple SSO providers simultaneously.
Generic OIDC
Works with any standards-compliant OpenID Connect identity provider.
Required fields:
| Field | Description |
|---|---|
| Issuer URL | Your IdP’s OIDC discovery URL (e.g. https://accounts.google.com or https://your-okta-domain.okta.com) |
| Client ID | The OAuth client ID from your IdP |
| Client Secret | The OAuth client secret from your IdP |
Setup steps:
- Create an OAuth/OIDC application in your identity provider
- Set the redirect/callback URL to:
https://drevnix.company.com:8001/auth/oidc/callback - Copy the client ID, client secret, and issuer URL
- In Drevnix, go to Settings → SSO → Add OIDC Provider
- Paste the values and click Save
GitHub OAuth
Lets portal users log in with their GitHub account.
Required fields:
| Field | Description |
|---|---|
| Client ID | From your GitHub OAuth App settings |
| Client Secret | From your GitHub OAuth App settings |
Setup steps:
- Go to GitHub Developer Settings → OAuth Apps and create a new app
- Set the Authorization callback URL to:
https://drevnix.company.com:8001/auth/github/callback - Copy the client ID and generate a client secret
- In Drevnix, go to Settings → SSO → Add GitHub Provider
- Paste the values and click Save
AWS OIDC
For teams using AWS-issued OIDC tokens (e.g. from IAM Identity Center or EC2 instance metadata).
Required fields:
| Field | Description |
|---|---|
| Client ID | AWS OIDC client ID |
| Client Secret | AWS OIDC client secret |
| Issuer URL | AWS OIDC issuer endpoint |
Permissions for SSO users
SSO users are treated as portal users once authenticated. On first login, a portal user account is created for them automatically with no extra permissions beyond the defaults. A super-admin must grant additional permissions (such as audit-logs:view or api:access) to SSO users just like any other portal user.
Disabling SSO
Remove a provider from Settings → SSO and click Save. Portal users who previously logged in via SSO will need to use a password instead. Reset their passwords via Users → Set New Password before disabling.