Identity
OIDC providers (Keycloak, Entra ID, …). IdP authenticates; GratiaMesh still authorizes with local RBAC.
SSO is force-disabled by GRATIA_OIDC_ENABLED. Local password login still works. This flag is not editable here.
Read-only: settings.read. Creating or editing requires settings.manage. Maps require rbac.manage.
Redirect URI (register at every IdP):
Loading…
| Display | Slug | Issuer | Enabled | Default | |
|---|---|---|---|---|---|
| secret | default |
No SSO providers yet. Add Keycloak or Entra ID to offer federated login.
Login preview
No enabled providers — login shows password only.