SSO / Login

Software

We use a software called Authentik to manage access to different resources. It is hosted on the servers in Kistan and provides federated access to all resources and apps. It can be used as a backend for both OAuth2, SAML and OIDC. This is supported by Google Workspace via LDAP as the source for accounts and groups.

The service is hosted on the domain https://sso.kth.it/ where a login will also show a dashboard with available apps.

Auth proxy

Services that needs to be controlled by auth that we host ourselves can add authentication using the Traefik proxy. The app also needs to be added with access control to the SSO service to be allowed in the proxy.