OpenID Connect (OIDC)
wikipedia:OpenID Connect is an authentication layer on top of OAuth 2.0
EKS, aws eks describe-cluster:
.../...
"identity": {
"oidc": {
"issuer": "https://oidc.eks.us-east-2.amazonaws.com/id/6457185BA3C72F8Axxxxxxxx"
}
},
Activities
- Creating an IAM OIDC provider for your EKS cluster
- Managing the Amazon EBS CSI driver as an Amazon EKS add-on
Related terms
- Keycloak
- Atlassian: Server vs. Data Center
vault auth enable oidc- IdP, SAML
aws cognito-idp create-identity-provider --provider-type OIDCaws iam list-open-id-connect-providers- EKS OIDC:
eksctl utils associate-iam-oidc-provider kubectl oidc-loginaws eks describe-cluster --name my-cluster --query "cluster.identity.oidc.issuer" --output text- IAM OIDC provider
- Terraform resource:
aws_lb_listener_rule: actionblock:forward, redirect, fixed-response, authenticate-cognito and authenticate-oidc. [1] - Terraform resource:
aws_iam_openid_connect_provider
See also
- OIDC,
kubectl oidc-login, AWS IAM OIDC, EKS OIDC, EKS module,aws iam list-open-id-connect-providers | aws iam create-open-id-connect-provider | aws iam get-open-id-connect-provider, OIDC tokens,aws_lb_listener_rule - OpenID, OpenID Foundation, OIDC, OAuth, OpenID Connect Provider,
eksctl utils associate-iam-oidc-provider, aws_iam_openid_connect_provider, Relying Party (RP) - SAML, IdP, Assertion, Attribute, SCIM, Amazon Cognito, OpenID Connect (OIDC), SAML response,
SAML:EduPersonOrgDN, Assertion Consumer Service (ACS), SAML examples,Entity ID,Name ID,SAMLResponse, saml-provider, saml2aws,aws_iam_saml_provider - IdP, AWS IAM identity provider, Set up Google Workspace SSO via SAML for Amazon Web Services, OIDC
Advertising:
