In Wazuh regarding SAML, OAuth/OIDC:

[Rahul Cmv]

• • Is there any documentation for SSO?
  • Is there an option to create a local fallback user account to prevent lockout due to SSO misconfigurations?
  • Are user accounts identified and mapped based on Azure objectId?
  • Is the metadata of the identity provider updated regularly?
  • Does Wazuh support certificate rollover at the identity provider?
  • Do the nameIDs support objectIDs or other unique values as values?
  • Is a new user account automatically created for users when they log in for the first time?
  • Is user information automatically updated each time the user logs in? 

[Aditya Sharma]

Hi Rahul,

You can follow the below documentation for the Wazuh SSO once: https://documentation.wazuh.com/current/user-manual/user-administration/single-sign-on/index.html

Below are the Identity Providers which works with Wazuh:

Identity providers

• Okta
• Azure Active Directory
• PingOne
• Google
• Jumpcloud
• OneLogin
• Keycloak

I hope this helps you.

Regards
Aditya Sharma