Product
Sambee turns your storage into a modern workspace by presenting SMB and local files in your browser. In the latest version 0.9 we added single sign-on via OpenID Connect. Given that configuring OIDC auth is not trivial, …
Sambee turns your storage into a modern workspace by presenting SMB and local files in your browser. In the latest version 0.9 we added single sign-on via OpenID Connect. Given that configuring OIDC auth is not trivial, we tested and refined a lot until we got an implementation that seemed right to us. I've listed some key insights below. What do you think we got right and what should be changed? - Treat the IdP as source of truth - Configuration: focus on UX and guide the admin through the setup process. - Prevent lock-out: ensure the admin making the configuration will still have admin rights once OIDC is enabled before activating OIDC login. - Auto-provision OIDC users. Don't require the admin to create user accounts in your product. They already maintain users on their OIDC's identity server. - Delegate your product's permission management to the IdP. Map one OIDC group to your product's admin role, another to your product's user role.
Discuss this product