Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Is there any way to prevent Kratos from sending the list of OIDC providers as UI nodes in the login flow?

Hello <@U04FX7LHK3J>
I dont think that option exists :thinking_face:
What UI are you using?
Can you share some details why you want to prevent this?

Hello <@U011D3UQKNY>,

&gt; What UI are you using?
We are looking at developing a SPA UI for self-service in Angular.
&gt; Can you share some details why you want to prevent this?
Each of our customers currently has their own AWS Cognito User Pool.  If the full list of OIDC providers is sent to a SPA self-service UI, it would be possible for someone to enumerate all our customers.  I was planning to implement home realm discovery in the self-service UI for users with corporate e-mail accounts and add an option for manual tenant code entry for those without corporate e-mail accounts.  I have considered using a backend-based self-service UI, which would allow us to filter out the OIDC providers there.

I'm also open to other alternatives.  I'm curious whether the Ory Network may become an option for us as some point.