Skip to main content
Version: 8.8 (unreleased)

Connect to an identity provider

Integrate with an external identity provider (IdP) for single sign-on (SSO), centralized user management, and secure authentication.

About IdP integration​

Connecting Camunda 8 to an external IdP allows you to:

  • Use enterprise authentication (for example, Microsoft EntraID, Okta, Keycloak, Auth0).
  • Centrally manage users in your IdP.
  • Enable SSO for Camunda components.
  • Enforce organization-wide security policies.

Self-Managed​

Self-Managed deployments only support external IdP integration using OpenID Connect (OIDC) (for example, Keycloak, Auth0, Okta, EntraID via OIDC).

You can integrate an IdP with both Identity (for the Orchestration Cluster) and Management Identity (for Web Modeler, Console, and Optimize).

SaaS​

Camunda 8 SaaS currently only supports external IdP integration using SAML or Azure Active Directory (EntraID).