Connecting Argo CD to specific identity providers through direct OIDC or bundled Dex, and turning their groups into Argo CD roles for people and automation.
Signing in to Argo CD with Microsoft Entra ID: direct OIDC with workload identity instead of a client secret, SAML or the microsoft connector through Dex, group claims mapped to RBAC, and the 200-group overage problem.
Connecting Argo CD to Okta: direct OIDC with a custom authorization server and a groups claim, the separate CLI client, SAML through Dex when the groups claim is not available, and mapping Okta groups to roles.
Using Google accounts for Argo CD sign-in through Dex: plain OIDC without groups, the Dex google connector with a domain-wide delegated service account for group-based RBAC, and why SAML is not recommended.
Letting engineers sign in to Argo CD with GitHub organization and team membership through the bundled Dex GitHub connector, including GitHub Enterprise Server, and mapping teams to Argo CD roles.
Authenticating Argo CD users against LDAP or Active Directory with the Dex LDAP connector when no OIDC provider exists: bind settings, group search for RBAC, TLS to the directory, and when to front the directory with an IdP instead.
Connecting Argo CD to Auth0 with OIDC: application settings, adding a groups or roles claim with an Auth0 action, callback and logout URLs, and mapping the claim to Argo CD RBAC.
Making argocd login --sso work behind your identity provider: the CLI client ID and localhost callback, PKCE settings, the server-side callback since 3.1, logout URLs, and fixes for common redirect errors.
Turning OIDC or SAML groups into Argo CD permissions: the scopes setting, g and p lines in policy.csv, group IDs versus names, project roles bound to groups, and testing a mapping before rollout.
Giving CI systems and scripts access to Argo CD without a person's login: local accounts with apiKey capability, project role JWT tokens, revoking tokens, and RBAC for machine accounts.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.