Skip to main content
Version: Weekly Build

Identity Providers (OIDC)

Codesphere can authenticate users against an OIDC identity provider, configured under codesphere.oauth.oidc in config.yaml, separate from the Git provider integrations used for repository access.

codesphere:
  oauth:
    oidc:
      type: <provider-type>
      enabled: true
      name: <display-name>
      issuerUrl: https://<your-idp>/issuer
      scopes:
        - openid
        - profile
        - email
  • issuerUrl must be the OIDC issuer URL your provider publishes at /.well-known/openid-configuration.
  • name is the display name shown on the Codesphere sign-in page.
  • scopes lists the OIDC scopes requested during authentication.

The provider's client ID and client secret are supplied as vault secrets, not in config.yaml; see Private cloud installer vault secrets. Configure the redirect URI in your identity provider using the final https://<base-domain> address once Requirements and sizing has established the domain.