Skip to content
Rolodex
Menu

Zitadel

Zitadel sign-in

People sign in through the shared Fleetworks Zitadel instance with OpenID Connect; Rolodex also reads Zitadel accounts to link them to directory users.

The web app signs people in with the authorization code flow and PKCE and keeps an encrypted session cookie. The API verifies bearer tokens against the issuer’s keys. The first sign-in creates an account with access pending until an admin grants an Org role.

Zitadel reconciliation reads Zitadel users and links them to directory users. An inactive or absent account becomes a Zitadel denial, which holds that person out of access grants.