mirror of
https://github.com/netbirdio/docs.git
synced 2026-04-18 08:26:35 +00:00
Embedded DEX and IdP Docs (#533)
* DEX Docs Overall Updates * No IdP required, Multiple IdPs supported, Onboarding flow * File Name Change * Add Announcement * Specify that Embedded IdP is Recommended * Condense Pages to index.mdx and Extra Remove Idp Info Quickstart * Fix Links * Remove API Reference * Remove Gap * Remove API Changes * Update Quickstart * New Local Page and Fixes * Fixing Gaps * Update idp doc * Update quickstart * Minor changes and banner * Fix Broken Links * Remove Password Reset --------- Co-authored-by: braginini <bangvalo@gmail.com>
This commit is contained in:
@@ -8,12 +8,24 @@ a 3rd party open-source STUN/TURN service [Coturn](https://github.com/coturn/cot
|
||||
If you would like to learn more about the architecture please refer to the [architecture section](/about-netbird/how-netbird-works).
|
||||
|
||||
<Note>
|
||||
It might be a good idea to try NetBird before self-hosting on your servers.
|
||||
We run NetBird in the cloud, and it will take a few clicks to get started with our managed version. [Check it out!](https://netbird.io/pricing)
|
||||
**New to self-hosting?** The [Quickstart guide](/selfhosted/selfhosted-quickstart) uses the built-in identity provider and is the fastest way to get started. This advanced guide is for users who need to integrate with an existing IdP or have specific enterprise requirements.
|
||||
</Note>
|
||||
|
||||
If you are looking for a quick way of trying self-hosted NetBird, please refer to [this guide](/about-netbird/how-netbird-works). Otherwise, continue here to set up
|
||||
NetBird with custom IdPs.
|
||||
<Note>
|
||||
It might be a good idea to try NetBird before self-hosting on your servers.
|
||||
We run NetBird in the cloud, and it will take a few clicks to get started with our managed version. [Check it out!](https://netbird.io/pricing)
|
||||
</Note>
|
||||
|
||||
## When to use this guide
|
||||
|
||||
Use this advanced guide if you:
|
||||
|
||||
- Need to integrate with an **existing identity provider** (Okta, Azure AD, Auth0, etc.)
|
||||
- Require **SCIM provisioning** for user/group sync (Enterprise)
|
||||
- Have **compliance requirements** that mandate a specific IdP
|
||||
- Want **full control** over the authentication infrastructure
|
||||
|
||||
For simpler deployments, the [Quickstart with embedded IdP](/selfhosted/selfhosted-quickstart) is recommended.
|
||||
|
||||
## Advanced self-hosting guide with a custom identity provider
|
||||
|
||||
@@ -123,18 +135,24 @@ NetBird supports generic OpenID (OIDC) protocol allowing integration with any ID
|
||||
|
||||
NetBird's management service integrates with some of the most popular IDP APIs, allowing the service to cache and display user names and email addresses without storing sensitive data.
|
||||
|
||||
Pick the one that suits your needs, follow the steps, and continue with this guide:
|
||||
Pick the one that suits your needs, follow the **Standalone Setup (Advanced)** section in each guide, and continue with this guide:
|
||||
|
||||
**Self-hosted options**
|
||||
- Continue with [Zitadel](/selfhosted/identity-providers#zitadel).
|
||||
- Continue with [Keycloak](/selfhosted/identity-providers#keycloak).
|
||||
- Continue with [Authentik](/selfhosted/identity-providers#authentik).
|
||||
- [Zitadel](/selfhosted/identity-providers/zitadel) - Previously used in the quickstart script
|
||||
- [Keycloak](/selfhosted/identity-providers/keycloak) - Popular open-source IAM
|
||||
- [Authentik](/selfhosted/identity-providers/authentik) - Flexible open-source IdP
|
||||
- [PocketID](/selfhosted/identity-providers/pocketid) - Lightweight self-hosted option
|
||||
|
||||
**Managed options**
|
||||
- Continue with [Azure AD](/selfhosted/identity-providers#azure-ad-microsoft-entra-id).
|
||||
- Continue with [Google Workspace](/selfhosted/identity-providers#google-workspace).
|
||||
- Continue with [Okta](/selfhosted/identity-providers#okta).
|
||||
- Continue with [Auth0](/selfhosted/identity-providers#auth0).
|
||||
- [Microsoft Entra ID](/selfhosted/identity-providers/managed/microsoft-entra-id) - Azure AD / Microsoft 365
|
||||
- [Google Workspace](/selfhosted/identity-providers/managed/google-workspace) - Google accounts
|
||||
- [Okta](/selfhosted/identity-providers/managed/okta) - Enterprise SSO
|
||||
- [Auth0](/selfhosted/identity-providers/managed/auth0) - Flexible auth platform
|
||||
- [JumpCloud](/selfhosted/identity-providers/managed/jumpcloud) - Cloud directory
|
||||
|
||||
<Note>
|
||||
Each provider page includes both "Connector Setup" (for use with embedded IdP) and "Standalone Setup (Advanced)" sections. For this guide, follow the **Standalone Setup** section.
|
||||
</Note>
|
||||
|
||||
### Step 4: Disable single account mode (optional)
|
||||
|
||||
@@ -283,10 +301,20 @@ To upgrade NetBird to the latest version, you need to review the [release notes]
|
||||
docker compose up -d --force-recreate
|
||||
```
|
||||
|
||||
## Migrating to Embedded IdP
|
||||
|
||||
If you've deployed NetBird using this advanced guide and want to simplify your setup by migrating to the embedded IdP:
|
||||
|
||||
1. Your existing IdP can be added as a **connector** to the embedded IdP
|
||||
2. Users can continue logging in with their existing credentials
|
||||
3. You can gradually transition to local user management
|
||||
|
||||
See the [Migration Guide](/selfhosted/identity-providers#migration-guide) for detailed instructions.
|
||||
|
||||
## Get in touch
|
||||
|
||||
Feel free to ping us on [Slack](/slack-url) if you have any questions
|
||||
|
||||
- NetBird managed version: [https://app.netbird.io](https://app.netbird.io)
|
||||
- Make sure to [star us on GitHub](https://github.com/netbirdio/netbird)
|
||||
- Follow us [on X](https://x.com/netbird)
|
||||
- Follow us [on X](https://x.com/netbird)
|
||||
Reference in New Issue
Block a user