Skip to main content
Each app uses Synthetiq as its default identity provider. Admins can configure additional OIDC-compliant identity providers to allow users to authenticate with Google, GitHub, or any other provider that supports OpenID Connect.

​
Managing identity providers

Admins configure identity providers at /admin/identity-providers.
Identity providers page

Identity providers list with provider status and configuration

Access requires admin-level scopes.

​
Adding a provider

To add a new identity provider, provide the following OIDC configuration: The framework handles the full OIDC flow — discovery, authorization, token exchange, and user profile mapping.
Identity provider configuration form

Adding an OIDC identity provider

​
Supported providers

​
How login works with multiple providers

When multiple identity providers are configured, the login page displays a button for each provider. Users choose which provider to authenticate with. The framework:
  1. Redirects the user to the provider’s authorization endpoint
  2. Handles the callback and token exchange
  3. Maps the provider’s user profile to the app’s User table
  4. Issues a session JWT for subsequent requests
Users who authenticate through different providers but share the same email address are treated as the same user.