Configuring Boundary OIDC for Restricted User Authentication

[elkh510]

Hi

• Could you please explain how to restrict the creation of new user accounts in Boundary when authenticating via OIDC, ensuring that only pre-existing users can log in?

• Alternatively, could you kindly provide guidance on how to configure Boundary to allow login via OIDC only for users who already exist in the Boundary system?

• Additionally, could you clarify how to permit login via OIDC based on specific criteria, such as allowing only users with certain email addresses (e.g., user1@example.com and user2@example.com) to authenticate and access resources?

[elkh510]

Find resolution here

How to get auto-user creation in multiple auth methods

The primary auth method for a scope “auto-vivifies”, creating a Boundary user object for the corresponding account automatically so the user can log in, but other auth methods do not. If you use separate orgs and have each one have one of the auth methods as primary, though, you can have both methods auto-vivify within their separate orgs. The other thing you can do is create users for the corresponding accounts on non-primary auth methods either automatically by using Terraform or scripting t…