IdP Dual Architecture
High-level architecture for the dual-IdP ZITADEL setup, showing how public and internal identity, GitOps repos, databases, trust and apps fit together, with links to the detailed identity runbooks.
High-level architecture for the dual-IdP ZITADEL setup, showing how public and internal identity, GitOps repos, databases, trust and apps fit together, with links to the detailed identity runbooks.
Use the ZITADEL console for the internal IdP to complete initial admin setup, configure SMTP, connect NAS LDAP, and define Kubernetes-related projects, roles and applications.
Deploy the internal ZITADEL identity provider into the cluster with FluxCD (namespace, Postgres, HelmRelease, ingress) as the foundation for LDAP, OIDC, and SSO runbooks.
Configure the QNAP NAS LDAP server as an LDAPS identity provider for the internal ZITADEL instance, including schema assumptions, TLS trust via trust-manager and Gatekeeper, console settings, and troubleshooting.