Setting up Single Sign-On (SSO) and directory services

SaltStack Config integrates with third-party identity and access management solutions to enable users to login to the SaltStack Config user interface.

SaltStack Config has a variety of ways to authenticate users:

• Native authentication - You can use the native authentication method by setting up local users. Local users are users whose username and password are natively stored in SaltStack Config. You can manage local user settings, such as user passwords, in the SaltStack Config user interface.
• SAML - You can also set up custom single sign-on authentication through other identity providers using Security Assertion Markup Language (SAML).
• LDAP or Active Directory - If your organization uses a Lightweight Directory Access Protocol (LDAP) or Active Directory server, you could manage those user settings in LDAP and then synchronize those settings in SaltStack Config.
• OAuth and OIDC - SaltStack Config also supports OAuth and OpenID Connect (OIDC).