Loading catalog…
Product briefing
sso-onboarding
ProductionSecurity & Assurance
sso-onboarding is a self-hosted onboarding console for configuring Google, Microsoft, and on-prem OIDC SSO across Arcore projects. It turns identity-provider setup into a repeatable guided workflow.
API: Available
Endpoints
3
Key features
5
Stack components
5
Controls noted
5
What changed
May 15, 2026: Added governance-aligned copy, compare tooling support, and transparency notes.
Key Features
- 1Guided setup for Google, Microsoft, and on-prem OIDC providers
- 2Self-hosted console for repeatable SSO onboarding across projects
- 3Dockerized runtime for local review and deployment testing
- 4Provider configuration workflow designed for multi-project environments
- 5Operational documentation for installing and running the onboarding studio
API Endpoints
| Method | Path | Description |
|---|---|---|
| GET | /api/sso-onboarding/status | Retrieve service health, readiness, and catalog metadata |
| GET | /api/sso-onboarding/providers | List governed providers for this product area |
| POST | /api/sso-onboarding/jobs | Start an asynchronous processing, sync, or analysis job |
Usage Example
python
import requests
response = requests.get(
url="https://api.arcore.internal/api/sso-onboarding/status",
headers={"Authorization": "Bearer <token>"},
)
print(response.json())Recommended next products
Tech Stack
ReactNode.jsDockerOIDCSSO Provider Configuration
Authentication
- •**Header:** `Authorization: Bearer <token>`
- •**Roles:** Product-specific roles gate read, write, admin, and execution actions
- •**Gateway:** Service-to-service calls are expected to be mediated by Arcore platform policy
Compliance & Security
Compliance
- ✓Authentication: Requests are expected to use Arcore identity, bearer tokens, or gateway-mediated service credentials
- ✓Authorization: Product-specific RBAC separates read, write, admin, and execution permissions
- ✓Auditability: Cataloged actions, job starts, and configuration changes should be recorded for review
- ✓Data Protection: Sensitive operational data should remain encrypted in transit and protected by least-privilege access controls
Security
- ✓Data Protection: Sensitive operational data should remain encrypted in transit and protected by least-privilege access controls
Related Products
Arcore Sentinel
A high-performance application testing service built with .NET 8.0 and Blazor. Sentinel provides multi-protocol testing (REST API, Database, WebSocket), load testing with detailed performance metrics, API compliance analysis, and real-time health monitoring with comprehensive test result storage.
Multi-Protocol Testing (REST API, SQL Database, WebSocket)
Load & Performance Testing with Concurrent User Simulation
.NETBlazorEntity Framework Core
4 endpointsOpen
Arcore Test
An automated architecture discovery and tech-stack scanning platform. ArcoreTest traverses application repositories and database schemas to build a living inventory of applications, components, triggers, actions, technologies, and test scenarios for governance and review.
Automated repository and database introspection
Centralized metadata registry for applications, components, triggers, and actions
PythonDjangoPostgreSQL
5 endpointsOpen
Arcore Aegis
A cybersecurity governance, risk, and compliance platform that combines framework management, system categorization, risk assessment, audit evidence workflows, penetration-testing tracking, workforce capability mapping, and component health monitoring.
Multi-framework library and control mapping
FIPS 199 system categorization and risk assessment workflows
PythonDjangoReact
6 endpointsOpen