Skip to content

Documentation

sluis is an OpenID Connect issuer for workforce access: directory sign-in for people, token exchange for CI jobs and workloads, one policy file in git and one audit trail. Connect something lists every integration.

Three products share one repository and one version. The tabs above hold a section for each.

What it is Start at
sluis the issuer: who a caller is, what that gets them, and the way out sluis
audit the audit trail: records written once, sealed, searchable, verifiable by an auditor audit
storage the state and key backends both share, chosen by the state and keys blocks storage

sluis runs on AWS Lambda or in Kubernetes. audit archives its records in S3, seals them and serves them to the console.

flowchart LR
  proof["Caller proof<br/>directory sign-in or exchange"] --> iss["sluis issuer"]
  iss --> cred["Tokens and credentials"]
  iss --> em["audit emitter"]
  em --> wr["audit writer"]
  wr --> s3[("S3 archive")]
  s3 --> q["query"]
  q --> ui["console Audit page"]

Next