Connect OAuth2/OIDC
Use any OpenID Connect provider. An account keeps one provider, so this connection replaces Okta, JumpCloud, Google, or Microsoft.
What the provider needs
The provider must support OpenID Connect with the authorization code flow. The issuer URL is the https address that serves /.well-known/openid-configuration, without that suffix.
Register a web client. Set its redirect URI to the one shown on Single Sign On in Settings. Copy the client ID and client secret. The client should allow the scopes openid, email, and profile.
Connect it
In Settings, open Single Sign On, choose OAuth2/OIDC, and paste the issuer, client ID, and client secret. Connect. Saving a different provider replaces this connection.