Identity, access policy & device posture — found from sitemap — ZeroTier

Cited by

Facts read from this source

• SSO paid feature Report an error

  “Device SSO is a paid feature available to Essential and Commercial subscribers.”

• SSO login modes Report an error

  “There are three login modes for SSO enabled networks: Standard - If the user can successfully authenticate to your OIDC provider, they will be allowed access to the ZeroTier network Email Based Access - The user is allowed to access the network if and only if their email address is in the email list provided by the network administrator. Group/Role Based Access - The user is allowed to access the network if and only if they are assigned one of the proper roles by the OIDC server.”

• SSO exclude devices Report an error

  “Exclude specific devices from SSO requirements This is useful for routers, servers, embedded devices, etc”

• SSO multiple oidc clients Report an error

  “You can configure multiple OIDC clients for your organization, but only one may be used at a time on an individual network.”

• SSO requires pkce Report an error

  “SSO Provider must support PKCE”

• SSO required scopes Report an error

  “Requires the following scopes: openid profile email offline_access”

• SSO desktop only Report an error

  “SSO is currently only supported on desktop operating systems such as macOS and Windows.”

• SSO min client version Report an error

  “Download and install ZeroTier 1.10.3 or greater on clients that will use SSO.”

• SSO google unsupported Report an error

  “Google OAuth2/OIDC is not supported as Google does not support PKCE clients at this time. You can, however, use Keycloak as a SAML Identity Broker with Google Workspace.”

• SSO keycloak SAML bridge Report an error

  “If you have a SAML provider, but not an OpenID Connect provider, Keycloak can also be used to bridge the gap.”

• SSO custom login page Report an error

  “If you wish, you can customize the final view of the sso login process. Create the file $ZEROTIER_HOME/sso-auth.template.html.”

• SSO onelogin role access Report an error

  “OneLogin by OneIdentity Coming Soon”

• SSO role admin only Report an error

  “Only Organization Owners in Legacy Central can enable SSO on a network. Organization Administrators do not have the necessary permissions to enable SSO.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The DevOps Engineer Identity, access policy & device posture
• The DevOps Engineer Pricing transparency
• The IT Lead Identity, access policy & device posture
• The IT Lead Pricing transparency
• The MSP Technician Identity, access policy & device posture
• The MSP Technician Deployment, API & administration
• The Operations Manager Identity, access policy & device posture
• The Operations Manager Pricing transparency
• The Information Security Officer Identity, access policy & device posture
• The Information Security Officer Pricing transparency
• The Skeptic Identity, access policy & device posture
• The Skeptic Deployment, API & administration