A step-by-step guide to OIDC/SSO, token lifecycle, and MFA policy.
GyroX follows the OIDC standard and integrates with external IdPs such as Entra ID. JWT validation passes through a single entry point, and sensitive personas require MFA.
- 1Register the app in your IdP and set the redirect URI.
- 2Store the client secret in a secret vault.
- 3Map group claims to roles.
- 4Enforce MFA on admin personas.
Refresh tokens are revocable per jti, and sessions persist in durable storage.