OIDC Login for Technicians and Automatic Creation of New Users

We use Authentik internally and have managed to integrate nearly all of our services with it. Authentik, in turn, retrieves its information from Active Directory (AD), where we have quite a few security groups that are used to control access to our systems. So, a new employee simply needs to be created in Active Directory and added to the appropriate groups. After that, links to all applications for which they have permissions appear on the Authentik dashboard. When they log in to an application for the first time, a new user account is created there, and permissions are assigned based on their group membership.

This would also be helpful for octoja. It would allow you to divide your customers into different groups (critical customers, private customers, etc.) and then automatically assign permissions to employees. That way, you wouldn’t have to manually create a user in octoja during onboarding.