Using workers for SSO

Hey guys, while i know this is part of the full zero trust platform. But in theory cant this implement as a standalong feature? Protect the people from published service by (semilar to the js challenge) users have to pass an SSO'd login portal first before reaching the published site.
7 Replies
Leo - CDE1
Leo - CDE1•2w ago
@a7medo778 integrate it with an IdP
a7medo778
a7medo778OP•2w ago
@Leo - CDE1 please do elaborate 😅
Leo - CDE1
Leo - CDE1•2w ago
so you want to protect a site with SSO? @a7medo778
a7medo778
a7medo778OP•2w ago
Yes, no one can access the site unless he passes the sso
Leo - CDE1
Leo - CDE1•2w ago
sure thing. having created your tunnel, you add an application in Zero Trust Home and define the private ip, define a policy to allow the right person by email or domain define your login methods, specifying only your already configured IdP and off you go when they go to the dns entry you defined for the app, they will get something like this
Leo - CDE1
Leo - CDE1•2w ago
No description
Leo - CDE1
Leo - CDE1•2w ago
the policy can also limit users by email address in the above I allow a gmail email to authenticate with a PIN or an Okta User via SAML Does that help is this for you or your corp ?

Did you find this page helpful?