Container View: Gesso Authentication

The authentication layer. It defines the auth plugin interface that the CMS, Commerce and ERP layers accept, plus single sign-on plugins for an external identity provider.

flowchart LR
    identityProvider("Identity Provider<br/>[Software System]")

    subgraph gessoAuth["Gesso Authentication [Software System]"]
        oidcProvider("OIDC Provider<br/>[Container]")
        samlProvider("SAML Provider<br/>[Container]")
    end

    identityProvider -. "OIDC" .-> oidcProvider
    identityProvider -. "SAML" .-> samlProvider

    classDef external fill:#64748b,stroke:#475569,color:#ffffff
    classDef container fill:#dbeafe,stroke:#2563eb,color:#1e3a8a
    class identityProvider external
    class oidcProvider,samlProvider container
    style gessoAuth fill:none,stroke:#7d8794,stroke-width:2px,stroke-dasharray:6 4