7.3 OAuth Login Settings (GitHub/GitLab)

Orbnetes deployment and release orchestration documentation for operators and platform teams.

OAuth configuration allows users to authenticate using external identity providers.

Typical setup flow:

  1. Create OAuth app in provider (GitHub/GitLab).
  2. Copy client ID / client secret into Orbnetes config.
  3. Configure exact callback URL.
  4. Enable provider in Orbnetes.
  5. Test login with non-admin account.
  6. Confirm post-login approval workflow (if enabled).

Operational behavior (recommended model):

  • First OAuth login creates a user in pending access state.
  • Admin reviews and grants permissions before full access.
  • Linked OAuth identities can be managed in user/profile connections.

Common misconfigurations:

  • callback URL mismatch,
  • wrong client secret,
  • provider disabled in Orbnetes but used in UI,
  • missing at least one active login method policy handling.

Best practices:

  • Enable only providers actually used by your organization.
  • Rotate OAuth secrets periodically.
  • Document callback URLs centrally per environment (dev/stage/prod).