Recommended migration path from local auth -> external iDP?
āUnsolvedāQuestion
Assuming en organization in Zitadel is using Local Auth (possible also with Passkeys) and wish to migrate to use External IDP instead of local auth. What is the recommended migration path to this?
It seems rather complicated to get a consistent and easy to use migration path from local auth to idp.
If local auth is enabled, then passkeys take precendence over idp. So if I as administrator is using passkeys as auth method, there are no other ways then having to disable local auth. But this comes at risk to lock my self out from Zitadel in case the external auth is misconfigured.
So what I would like to archive is to be able to enable an external idp, test it works before disabling local auth and therefore forcing all users to use the external idp.
It seems rather complicated to get a consistent and easy to use migration path from local auth to idp.
If local auth is enabled, then passkeys take precendence over idp. So if I as administrator is using passkeys as auth method, there are no other ways then having to disable local auth. But this comes at risk to lock my self out from Zitadel in case the external auth is misconfigured.
So what I would like to archive is to be able to enable an external idp, test it works before disabling local auth and therefore forcing all users to use the external idp.
