SSO / OIDC

Erato uses oauth2-proxy  for handling user authentication.

This way, Erato supports a wide range of authentication providers via OAuth or OIDC like Google, Microsoft Entra ID, Keycloak, etc.

For a full list of supported providers and configuration guides for them, see the oauth2-proxy documentation .

If you want to set up a quick demo deployment of Erato, we recommend using Dex with a fixed userlist and the generic OIDC provider.