Login flow
Last updated:
User navigates to a protected deployment. Ex. lmixer.kth.it.
User is redirected to the SSO service at sso.kth.it.
if the user is not already authenticated, they are redirected to Google to sign in.
After signing in, the user is redirected back to the SSO service.
Authentik checks whether the user is allowed to access the application.
If the application allows a group the user belongs to, access is granted.
If all OK, redirect back to the original site that was requested.