Skip to main content

Manage External Providers

To enable users to access the GlobalAI platform using their existing corporate credentials, you must configure a connection between the platform and an external Identity Provider (IdP). This process involves a paired configuration of a Provider and an Application.

Create an application and provider pair​

You can create a new provider in the Admin interface, or you can use the Create with Provider option to create a new application and its provider at the same time, as shown below:

  1. Log in to GlobalAI as an administrator and open the Admin interface.
  2. Go to Applications > Applications.
  3. Click Create with Provider to set up the application and provider pair simultaneously. (You can click Create if you only need to set up an application without an associated provider).
  4. In the New application wizard, define the application details, the provider type and configuration settings, and bindings for the application.
  5. On the Review and Submit Application panel, verify all settings and click Submit.

To learn more about adding an Application and a provider pair, refer to the specific Authentik documentation.

Managing inbound identities (Sources)​

If you wish to allow "Social Login" (Login with Google, GitHub, etc.) or connect to an external directory as an identity source, the path is different:

  1. Navigate to Directory > Federation & Social.
  2. Select Create and choose your source (for example, GitHub or Google).
  3. To display this source on your login screen, navigate to Flows and Stages > Flows and edit your default-authentication-identification stage to include the new source under Selected sources.
Enterprise licensing

While core protocols are available to all users, specific enterprise-grade providers and features require a specialized license. To unlock these capablities, you may acquire an Enterprise License directly via goauthentik.io.

Customize Auth Flows

Add MFA or custom challenges specifically for external or social login attempts.

Secure the Platform

Adjust reputation thresholds to account for traffic coming from known corporate IP ranges.