Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

:wave: Team, I'm wondering if Kratos support OIDC SSO atm, it seems only social sign-in is supported according to the <https://www.ory.sh/docs/kratos/quickstart|public-facing docs>.

Hi <@U049Y1LP213>

What do you mean? Do you mean to have your own "Sign in with X" button on 3rd party apps?

For example, our customers want to use SSO with IdPs, e.g., Okta.

Kratos doesn't support this on its own. You need to hook it up with Hydra to achieve this. Or you can use the Ory Network. 

<https://www.ory.sh/run-oauth2-server-open-source-api-security/|https://www.ory.sh/run-oauth2-server-open-source-api-security/>

I think there is a misunderstanding. We don't need the functionality of OP, RP is good enough.

i.e., our customer can use OIDC SSO to authenticate into our app through, e.g., Okta.

basically our app only needs to be a RP and redirect the customers to IdP for SSO.

Hi <@U049Y1LP213>
I see, yes you can configure a generic provider in Kratos. I'm not sure if there are requirements in the OP you use that we do not cover. Check out <https://www.ory.sh/docs/kratos/social-signin/generic>