Manage Providers
Everything after setup happens from the providers table on CONFIGURE → Identity Providers. Row actions live under the ⋯ menu at the end of each row.
Active and inactive
The eye icon toggles a provider between Active and Inactive, and a toast confirms the change.
| State | What users see | Configuration |
|---|---|---|
| Active | A sign-in button on the login screen | Live |
| Inactive | Nothing — the button disappears | Kept intact |
Deactivating is the reversible way to take a provider offline. Credentials, mappings, and certificates all survive, so switching it back on restores sign-in with no re-entry.
Useful for staging a provider before launch, or cutting off a route during an incident without losing the setup.
Delete a provider
The trash icon opens a confirmation dialog listing what goes with it:
- OAuth or SAML configuration
- Registered applications and redirect URLs
- Tokens, keys, and secrets
- User authentication flows and logs
There is no undo. Anyone who signs in through this provider loses access the moment it is removed, and the credentials must be re-issued from the provider console to rebuild it.
If you only need it switched off, deactivate instead.
Rotating credentials
Client secrets expire — Entra's default to 6 or 24 months, and Google and GitHub secrets can be regenerated at any time. Sign-in breaks the moment the old value stops working.
Edit the provider and replace the secret rather than deleting and recreating it. That keeps the provider's ID, its client binding, and its history intact.
Find a provider
| Control | Filters by |
|---|---|
| Search box | Name or ID |
| Type tabs | All, OIDC, SAML, each with a live count |
| All statuses | Active or Inactive |
| All clients | The client a SAML provider is bound to |
Workspace-wide OIDC providers show – in the Configuration column, since they are not tied to a single client.