Plain Envoy can be the enforcement point for browser products, while an identity provider and auth service handle OIDC or SAML login flows. This course teaches the request flow, redirect behavior, sessions, trusted identity headers, and production failure modes.
Course guide
SSO with Envoy for Kubernetes Products
Understand how SSO works for Kubernetes products behind Envoy using OIDC or SAML through an IdP and external authorization service.