auth
5 pagesAuth concepts
Nais offers an opt-in login proxy (also known as Wonderwall) that simplifies the process of authenticating end-users in your application.
Auth reference
Reference documentation for the login proxy provided by Nais. Enforcement of authenticated sessions is not enabled by default. To enable enforcement of login, specify the following in your…
Authentication and authorization
Services and addons to support authentication and authorization in your applications.
Log in users
This guide shows you how to log in users to your application with the login proxy. Before you begin, ensure that you have:
Workload Identity
All workloads on Nais have their own identities. In practice, this is a Kubernetes Service Account. Workloads on Nais are automatically injected with a short-lived OpenID Connect (OIDC) identity…