IDP Integration Overview

Create, manage, and configure federated identity on Vultr, connecting an external identity provider for Single Sign-On authentication and SCIM provisioning.

Vultr supports federated identity through OpenID Connect (OIDC) and System for Cross-domain Identity Management (SCIM) 2.0, allowing you to connect any OIDC-compliant identity provider (IdP) to your organization. Together, these two features let your identity provider handle both how users sign in and how their accounts in Vultr are created, updated, and removed.

This overview describes what IDP integration is and how its pieces fit together. Use it to understand how the guides in this section relate before configuring either one.

What Is IDP Integration

IDP integration refers to connecting an external identity provider to a Vultr organization. It consists of two independent parts:

Single Sign-On (SSO) authenticates users. Your identity provider verifies who a user is, and grants access based on that verification instead of a password.
SCIM provisioning manages user lifecycle. Your identity provider creates, updates, and removes users in your organization, and syncs group membership automatically as changes happen on the provider's side.

How It Works

A user signs in to your identity provider, which authenticates them and issues an OIDC token.
Vultr validates that token and authorizes the user's session based on the identity it contains.
Separately, SCIM sends standardized REST API calls to Vultr's SCIM endpoint whenever a user or group changes in your identity provider, keeping the records in sync.

Supported Identity Providers

Vultr integrates with any identity provider that implements the OIDC standard for authentication, the SCIM 2.0 standard for provisioning, or both.

If you use Okta, follow How to Integrate Vultr Single Sign-On and SCIM with Okta.
For any other identity provider, follow How to Integrate Vultr Single Sign-On and SCIM with an Identity Provider.

Note

SCIM provisioning is verified with Okta. Support for additional identity providers is in progress, and other SCIM 2.0-compliant providers may work but are not yet verified.

A root user is always exempt from your identity provider's control. Your identity provider cannot remove, deactivate, or lock out a root user, and a root user can still sign in with a Vultr password even while SSO is enabled.

IDP Integration Overview

Create, manage, and configure federated identity on Vultr, connecting an external identity provider for Single Sign-On authentication and SCIM provisioning.

This overview describes what IDP integration is and how its pieces fit together. Use it to understand how the guides in this section relate before configuring either one.

What Is IDP Integration

IDP integration refers to connecting an external identity provider to a Vultr organization. It consists of two independent parts:

Single Sign-On (SSO) authenticates users. Your identity provider verifies who a user is, and grants access based on that verification instead of a password.
SCIM provisioning manages user lifecycle. Your identity provider creates, updates, and removes users in your organization, and syncs group membership automatically as changes happen on the provider's side.

How It Works

A user signs in to your identity provider, which authenticates them and issues an OIDC token.
Vultr validates that token and authorizes the user's session based on the identity it contains.
Separately, SCIM sends standardized REST API calls to Vultr's SCIM endpoint whenever a user or group changes in your identity provider, keeping the records in sync.

Supported Identity Providers

Vultr integrates with any identity provider that implements the OIDC standard for authentication, the SCIM 2.0 standard for provisioning, or both.

If you use Okta, follow How to Integrate Vultr Single Sign-On and SCIM with Okta.
For any other identity provider, follow How to Integrate Vultr Single Sign-On and SCIM with an Identity Provider.

Note

SCIM provisioning is verified with Okta. Support for additional identity providers is in progress, and other SCIM 2.0-compliant providers may work but are not yet verified.

IDP Integration Overview

What Is IDP Integration

How It Works

Supported Identity Providers

Note

Categories

Identity Providers

Single Sign-On

SCIM

Popular Articles

IDP Integration Overview

What Is IDP Integration

How It Works

Supported Identity Providers

Note

Categories

Identity Providers

Single Sign-On

SCIM

Popular Articles