Dex

OpenID Connect service that federates authentication to upstream providers through connectors.

Provider
default
Category
Security
Properties · 5 set by this component
propertytypevaluesrequiredkind defaultthis component
authorizationModelenumnone | rbac | abac | rebacnorbac▸ none
centralised · advancedboolean—notrue▸ true
localPasswordDatabase · component propertyboolean—nofalseinherited
managedboolean—notrue▸ false
mfaboolean—nofalse▸ false
protocolenumoidc | saml | oauth2 | iam | customnooidc▸ oidc
storageBackend · component propertyenumetcd | kubernetes | postgres | mysql | sqlite | memoryno—inherited
upstreamConnectors · component propertyboolean—notrueinherited
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "dex", component: "dex" }
Other Identity provider products · 47
Resource Access Managementalibaba-ramalibabacloudidentity-providerAmazon Cognitoaws-cognitoawsidentity-providerAmazon Cognito identity poolaws-cognito-identity-poolawsidentity-providerAWS Directory Serviceaws-directory-serviceawsidentity-providerAWS IAMaws-iamawsidentity-providerAWS IAM Identity Centeraws-iam-identity-centerawsidentity-providerAWS IAM Roles Anywhereaws-iam-roles-anywhereawsidentity-providerAWS Directory Service Simple ADaws-simple-adawsidentity-providerMicrosoft Azure Attestationazure-attestationazureidentity-providerMicrosoft Entra Domain Servicesazure-entra-domain-servicesazureidentity-providerMicrosoft Entra External IDazure-entra-external-idazureidentity-providerMicrosoft Entra IDazure-entra-idazureidentity-providerMicrosoft Entra Verified IDazure-entra-verified-idazureidentity-providerAzure IoT Hub Device Provisioning Serviceazure-iot-dpsazureidentity-providerManaged identities for Azure resourcesazure-managed-identityazureidentity-providerCloudflare One identity providercloudflare-one-identity-providercloudflareidentity-providerActive Directory Domain Servicesactive-directoryidentity-providerAthenzathenzidentity-providerAuth0auth0identity-providerAutheliaautheliaidentity-providerauthentikauthentikidentity-providerClerkclerkidentity-providerFreeIPAfreeipaidentity-providerGeneric identity provideridentity-provideridentity-providerKeycloakkeycloakidentity-providerOAuth2 Proxyoauth2-proxyidentity-providerOktaoktaidentity-providerOpenFGAopenfgaidentity-providerOpenLDAPopenldapidentity-providerOryoryidentity-providerPing Identity Platformping-identityidentity-providerSpiceDBspicedbidentity-providerSPIREspireidentity-providerStytchstytchidentity-providerWorkOSworkosidentity-providerZitadelzitadelidentity-providerCloud Identitygoogle-cloud-identitygcpidentity-providerFirebase Authenticationgoogle-firebase-authgcpidentity-providerGoogle Identity Platformgoogle-identity-platformgcpidentity-providerManaged Service for Microsoft Active Directorygoogle-managed-microsoft-adgcpidentity-provider
and 7 more → Identity provider page
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Dex: "an identity service that uses OpenID Connect to drive authentication for other apps", acting
# as "a portal to other identity providers through 'connectors'" - LDAP, SAML, GitHub, Google, Active
# Directory. It defers authentication rather than owning a user directory, and keeps its state in
# etcd, Kubernetes, PostgreSQL, MySQL, SQLite or memory ("Documentation"). It issues tokens and leaves
# authorization to the applications that consume them.
schemaVersion: "1"
type: "component"
id: "dex"
kind: "identity-provider"
provider: "default"
docs: "https://dexidp.io/docs/"
defaults:
  managed: false
  protocol: "oidc"
  authorizationModel: "none"
  centralised: true
  mfa: false
properties:
  storageBackend:
    type: "enum"
    values: ["etcd", "kubernetes", "postgres", "mysql", "sqlite", "memory"]
  upstreamConnectors:
    type: "boolean"
    default: true
  localPasswordDatabase:
    type: "boolean"
    default: false

The same page as markdown, for an agent: /catalogue/components/dex.md