For business
Add Harbor SSO
Add passkey sign-in to your app through OIDC/OAuth 2.1 with PKCE. For applications that use SAML, connect through the Harbor SAML bridge.
OIDC / OAuth 2.1 with PKCE
Use the OpenID Connect authorization code flow with PKCE. If your app already supports OIDC, configure it to use Harbor as its identity provider.
SAML applications
Connect your SAML 2.0 application through the bridge to Harbor's OIDC provider.
Account IDs specific to your app
Your app receives a pairwise identifier for each user. That ID stays the same when the user returns to your app and differs from the IDs other apps receive.
What your team needs to set up
Harbor Cloud runs the identity provider and provides the SAML bridge. Your team handles integration, testing, and your application’s sessions and operations. Managed migration is not included.
- Register your app and configure its redirect URIs, requested scopes, and claims mapping.
- Test sign-in and authorization against your requirements before sending production traffic.
- Manage sessions in your app, monitor its availability, and rotate your client credentials.
Set up your integration
Read the developer guide for OIDC/OAuth 2.1 and SAML setup details.