Dex is an identity service that uses OpenID Connect to drive authentication for other apps.
Dex acts as a portal to other identity providers through “connectors.” This lets dex defer authentication to LDAP servers, SAML providers, or established identity providers like GitHub, Google, and Active Directory. Clients write their authentication logic once to talk to dex, then dex handles the protocols for a given backend.
Dex implements the following connectors:
| Name | supports refresh tokens | supports groups claim | status | notes |
|---|---|---|---|---|
| LDAP | yes | yes | stable | |
| GitHub | yes | yes | stable | |
| SAML 2.0 | no | yes | stable | |
| GitLab | yes | yes | beta | |
| OpenID Connect | yes | no (#1065) | beta | Includes Google, Salesforce, Azure, etc. |
| yes | no | beta | ||
| Microsoft | yes | yes | beta | |
| AuthProxy | no | no | alpha | Authentication proxies such as Apache2 mod_auth, etc. |
Tell us about a new Kubernetes application
Never miss a thing! Sign up for our newsletter to stay updated.
Discover and learn about everything Kubernetes
