IDP Proxy
My-Access supports SAML2, OIDC and OAuth2 protocols as Service Provider (SP) in a scenario where user authentication/authorization is delegated to an external Social Network (Meta, Google, X, etc.) or private third party Identity Provider (IdP) using their own local credentials.
In these scenarios, My-Access and external IdPs must share a unique identifier for each user. This identifier acts as a correlation key during the authentication process. My-Access supports registration of user accounts by consuming SAML attributes.
Use My-Access as IdP Proxy to social platforms or private IdPs.
Enrollment process
Enrollment
IDP Proxy authentication does not require any specific enrollment from the user’s perspective.
Authentication process
As for other authentication modes, once the method activated, a new module will be available. Users will be able to click on the associated tile, or will automatically be redirected to the third-party IDP based on the settings (e.g. all @acme.com users are redirected to the third-party IDP).
Memority supports login_hint to make the authentication process easier (users do not need to type their login twice).
