Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi, I'm configuring a Kratos instance and need to disable the ability to create an account for a specific OIDC provider, it needs to be login-only. It doesn't seem like there's an option to restrict a provider's flows. Any help would be appreciated.

so the use case is that you can create accounts normal for other methods and other OIDC providers, but for this one OIDC provider users can't create accounts?
you might be able to use Ory Actions to restrict that :thinking_face:

I thought that, but we're using an entirely self-hosted setup. As far as I am aware, Actions is only available on Ory Network?

I thought I could hide the provider's button on the registration page, however accounts can be created through the login flow when using OIDC, so this won't work.

Ory Actions is available also in open source. 