All 29 RBAC questions
More in RBAC
What is the difference between ArgoCD RBAC and Kubernetes RBAC? How do you bind a user (not a group) to a role? How is an ArgoCD RBAC policy rule structured? How do you scope RBAC to specific projects and applications? What is the exec resource in RBAC and why is it sensitive? What actions can be controlled for the applications resource? What resources can ArgoCD RBAC control besides applications? How do you create a read-only role scoped to one project? What is a local account and when would you use one? How do you manage RBAC declaratively under GitOps?
Advertisement
Back to results for “Authentication”
ArgoCD › RBAC

How does ArgoCD integrate with SSO for authentication?

Intermediate

Answer

ArgoCD supports SSO via OIDC (directly or through its bundled Dex connector for LDAP, SAML, GitHub, etc.). Users log in with their identity provider; group claims from the token are mapped to ArgoCD roles in the RBAC policy via `g, <group>, <role>` lines, centralizing access control with corporate identity.
g, "my-org:platform-team", role:admin
g, "my-org:developers", role:dev
Real-world example Engineers log in with corporate SSO, and their IdP group memberships automatically grant the right ArgoCD roles.

Common follow-ups: What is Dex used for? | How are IdP groups mapped to roles?

RBAC Multi-cluster Applications
All 29 RBAC questions