🛠️ How-to guide

<aside> 🔌

WHAT IT DOES

Identity Providers let your agent sign users in through your own identity provider, so it can recognize who it's talking to and act on their behalf. Part of Inside Your Agent.

</aside>

Before you start

• A role that can edit agents — Editor, Publisher, or Admin (see Roles & Permissions).
• An OAuth 2.0 / OpenID Connect app registered with your provider (a client ID and secret).
• The ability to register the Redirect URI shown on this tab with that provider.

The providers

Four provider types are available, each shown as Configured or Not configured with a Configure button:

The Identity Providers tab — Azure AD, Google, Okta, and Generic OAuth 2.0, each showing whether it's configured.

• Azure AD
• Google
• Okta
• Generic OAuth 2.0

Configuring a provider

Select Configure and fill in:

• Name — a label for this connection.
• Provider-specific field(s): Azure AD → Tenant ID; Okta → Well-Known Configuration URI; Generic OAuth 2.0 → Authorization URI and Token URI.
• Client ID and Client Secret from your registered app.
• Scope — the permissions to request (a sensible default is filled in per provider).
• Options: Enable Refresh Token (Azure/Generic), and for Generic, Use PKCE and Use Basic Auth for Token Request.