Enforce group-based access controls

Identity & access how‑tos

This section will contain guides for configuring and operating single sign‑on and access control, such as:

• Connecting to external identity providers (IdPs).
• Managing groups and group‑based access.
• Customizing Keycloak behavior and sessions.
• Protecting apps with Authservice.
• Handling service accounts and device flows.

Source material from previous docs

Relevant existing docs to draw from:

• src/content/docs-old/reference/configuration/Single Sign-On/overview.md
• src/content/docs-old/reference/configuration/Single Sign-On/auth-service.md
• src/content/docs-old/reference/configuration/Single Sign-On/group-based-auth.md
• src/content/docs-old/reference/configuration/Single Sign-On/keycloak-customization-guide.md
• src/content/docs-old/reference/configuration/Single Sign-On/keycloak-session-management.md
• src/content/docs-old/reference/configuration/Single Sign-On/device-flow.md
• src/content/docs-old/reference/configuration/Single Sign-On/service-account.md
• src/content/docs-old/reference/configuration/Single Sign-On/sso-client-validation.md
• src/content/docs-old/reference/configuration/Single Sign-On/sso-templating.md
• src/content/docs-old/reference/configuration/Single Sign-On/trusted-ca.md
• src/content/docs-old/reference/configuration/Single Sign-On/notifications-and-alerts.md
• src/content/docs-old/reference/configuration/Single Sign-On/l7-load-balancer.md
• src/content/docs-old/reference/configuration/Single Sign-On/recovering-lost-credentials.md
• src/content/docs-old/reference/configuration/Single Sign-On/Identity Providers/overview.md
• src/content/docs-old/reference/configuration/Single Sign-On/Identity Providers/azure-idp.md
• src/content/docs-old/reference/configuration/Single Sign-On/Identity Providers/google-idp.md