Skip to content
Chorus
Menu

Zitadel (OIDC)

Zitadel

People sign in through Zitadel, the identity provider shared across the Fleetworks suite.

The web app runs the OIDC authorization code flow with PKCE as a public client, with no client secret. The API verifies each token against the issuer’s published keys.

Chorus never sees a password. On first sign-in it creates a user from the identity provider’s subject; roles live in Chorus, not in Zitadel.