For the complete documentation index, see llms.txt.
Skip to main content
Version: 8.10

Connect to an Identity Provider

Integrate with an external identity provider (IdP) for single sign-on (SSO), centralized user management, and secure authentication.

About IdP integration​

Connecting Camunda 8 to an external IdP allows you to:

  • Use enterprise authentication (for example, Microsoft EntraID, Okta, Keycloak, Auth0).
  • Centrally manage users in your IdP.
  • Enable SSO for Camunda components.
  • Enforce organization-wide security policies.

Self-Managed​

Self-Managed deployments only support external IdP integration using OpenID Connect (OIDC) (for example, Keycloak, Auth0, Okta, EntraID via OIDC).

You can integrate an IdP with both Admin (for the Orchestration Cluster) and Management Identity (for Camunda Hub and Optimize).

SaaS​

Camunda 8 SaaS supports external IdP integration at two levels:

  • Organization-wide, using SAML or Microsoft Entra ID (formerly Azure AD): connect to an identity provider. This covers sign-in to Camunda Hub, Console, and Web Modeler.
  • Per-cluster, using OAuth 2.0 and OpenID Connect (OIDC): connect an external identity provider. This covers sign-in to a single Orchestration Cluster (Operate, Tasklist, Admin, and the APIs), alongside Camunda's built-in provider.