ZKAuth
All releases
ProductPreview

OAuth, OIDC, and SCIM configuration

The dashboard gained provider configuration, OIDC discovery and JWKS refresh, plus reveal-once SCIM token issuance for preview testing.

Mohith / 5 min read

What changed

Project settings now expose the preview provider configuration needed for OAuth and OIDC discovery and controlled JWKS refresh. SCIM setup can issue a project-bound token that is revealed once.

Provider secrets are handled as protected configuration, while discovery and key refresh are explicit operations with bounded inputs rather than arbitrary fetches from browser-supplied locations.

Provisioning boundary

A SCIM token is scoped to one project and shown only at creation. Losing it requires issuing a replacement rather than retrieving the stored secret from the dashboard.

Preview interoperability

Users, Groups, pagination, Bulk operations, deprovisioning, and provider-specific behavior still require approved directory and identity-provider runs.

Availability

These foundations are not certified enterprise federation. Multiple production identity providers and directory tenants still need end-to-end validation. SAML is not presented as available.