Authentik
ClusterNest Managed OpenSearch can delegate Dashboards login to Authentik over either OIDC or SAML. Pick one - auth_type accepts only a single mode per cluster.
AWS Identity Center
ClusterNest Managed OpenSearch can delegate Dashboards login to AWS IAM Identity Center via SAML. Identity Center's customer-managed application catalog is SAML 2.0 only - there's no generic OIDC app registration like Okta/Azure/Keycloak offer, so auth_type = "saml" is the only option here.
Azure (Entra ID)
ClusterNest Managed OpenSearch can delegate Dashboards login to Microsoft Entra ID (Azure AD) over either OIDC or SAML. Pick one - auth_type accepts only a single mode per cluster.
Google Workspace
ClusterNest Managed OpenSearch can delegate Dashboards login to Google over either OIDC or SAML. SAML is the recommended option - see the disclaimer under OIDC below for why. Pick one - auth_type accepts only a single mode per cluster.
Keycloak
ClusterNest Managed OpenSearch can delegate Dashboards login to Keycloak over either OIDC or SAML. Pick one - auth_type accepts only a single mode per cluster.
Okta
ClusterNest Managed OpenSearch can delegate Dashboards login to Okta over either OIDC or SAML. Pick one - auth_type accepts only a single mode per cluster.