IdP Discovery
Identity providers and the routing rules that decide where each sign-in is sent.
Identity providers
| Provider | Org | Type | Status | Provisioning |
|---|---|---|---|---|
Corporate Active Directory 0oa_ad_corp | AD | Active | JIT + scheduled import | |
Azure AD (Entra ID) 0oa_entra | SAML 2.0 | Active | JIT · account link by email | |
Google Workspace 0oa_google | OIDC | Active | JIT | |
Sandbox LDAP 0oa_ldap_sbx | LDAP | Inactive | Import only | |
Corporate Active Directory 0oa_ad_corp | AD | Active | JIT + scheduled import | |
Azure AD (Entra ID) 0oa_entra | SAML 2.0 | Active | JIT · account link by email | |
Sandbox LDAP 0oa_ldap_sbx | LDAP | Inactive | Import only |
Routing rules
Evaluated top-down per org — the first matching rule decides the IdP.
| # | Rule | Org | Conditions | Routes to | Status |
|---|---|---|---|---|---|
| 1 | Contractors to Entra 0pri_contractors Same conditions as Contractor route (legacy) but different target — first match wins | user identifier suffix "@contractor.northstar.example" | Azure AD (Entra ID)SAML2 | Active | |
| 2 | Contractor route (legacy) 0pri_contractors_dup Same conditions as Contractors to Entra but different target — first match wins | user identifier suffix "@contractor.northstar.example" | Google WorkspaceOIDC | Active | |
| 1 | Default rule 0pri_sbx_default | Everyone (no conditions — catch-all) | Okta (this org)OKTA | Active | |
| 1 | Default rule 0pri_sbx_default | Everyone (no conditions — catch-all) | Okta (this org)OKTA | Active | |
| 1 | Contractors to Entra 0pri_contractors Same conditions as Contractor route (legacy) but different target — first match wins | user identifier suffix "@contractor.northstar.example" | Azure AD (Entra ID)SAML2 | Active | |
| 2 | Contractor route (legacy) 0pri_contractors_dup Same conditions as Contractors to Entra but different target — first match wins | user identifier suffix "@contractor.northstar.example" | Google WorkspaceOIDC | Active | |
| 3 | Default rule 0pri_default | Everyone (no conditions — catch-all) | Okta (this org)OKTA | Active |