How deeply does Build Python Web Apps with Streamlit cover identity provider?

Explains provider setup, credentials, redirects, user inspection, and logout, but not OIDC protocol internals.

Identity provider

As explained in Build Python Web Apps with Streamlit

An identity provider is a service that authenticates users and supplies identity information to relying applications.

An identity provider is a service that verifies a user’s identity and supplies identity information to an application. With OpenID Connect (OIDC), a Streamlit app can send users to providers such as Google, Microsoft, Okta, or Auth0 instead of managing passwords and password hashes itself. section 8.4.3

A typical identity-provider setup requires:

Creating an account with an OIDC-supporting provider. section 8.4.3
Storing the client ID, client secret, and related metadata in st.secrets. section 8.4.3
Calling st.login to redirect users to the provider, then reading login status or email through st.user. section 8.4.3
Calling st.logout to end the session and return users to the app. section 8.4.3

Google sign-in

A user selects Log in, is redirected to Google, and returns authenticated to the app. The app can check st.user.is_logged_in and display st.user.email without storing the user’s password. section 8.4.3

How Build Python Web Apps with Streamlit covers it

Cover of Build Python Web Apps with Streamlit

liveBook manning.com

Read Build Python Web Apps with Streamlit on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

ASP.NET Core in Action, 3eA third-party identity service is an externally operated identity provider that supplies authentication and identity-management capabilities to applications.
liveBook manning.com

Effective Platform EngineeringAn identity provider is a system that authenticates entities and supplies identity or authorization information to relying applications and services.
liveBook manning.com

Software Security for DevelopersAn identity provider is a system that authenticates identities and provides identity information to relying applications or services.
liveBook manning.com

.NET in Action, Second EditionAn identity provider is a service that authenticates users and supplies identity and authorization metadata to client applications.
liveBook manning.com

Secure APIsAn identity provider is a service that authenticates identities and issues identity or authorization artifacts to relying clients.
liveBook manning.com

MongoDB 8.0 in Action, Third EditionAn identity provider is a service that authenticates users and supplies verified identity information to relying applications or services.
liveBook manning.com

Architecting an Apache Iceberg LakehouseAn identity provider is a system that authenticates users or services and supplies their identities and authorization context to other systems.
liveBook manning.com

Terraform in Depth: Infrastructure as Code with Terraform and OpenTofuAn identity provider is a system that authenticates identities and issues identity assertions or tokens to relying systems.
liveBook manning.com

Grokking Web Application SecurityAn identity provider is a service that authenticates users and supplies identity assertions or authentication services to other applications.
liveBook manning.com

Authorization in ActionA central identity provider is a service that centrally manages digital identities and supplies authentication or identity information to relying applications or other systems.
liveBook manning.com

Building Distributed Applications that WorkAn identity provider is a system that authenticates principals and supplies identity information and access-related assertions to applications.

Compare how 12 books explain identity provider →

Related concepts

single sign-onused by · Single sign-on is an authentication arrangement in which one authentication event enables a user to access multiple applications or services without signing in separately to each.
federated identity integrationused by · Federated identity integration is an arrangement in which systems or organizations trust identity and authentication assertions exchanged across their boundaries.
security tokenproduces · A security token is a credential or assertion presented to a service to convey authenticated identity, authorization, or session information.
tokenproduces · A token is a discrete unit of text, such as a word, word fragment, character, or symbol, represented and processed as an element by a language model.
Microsoft Entra IDused by · Microsoft Entra ID is Microsoft's cloud-based identity and access-management service for authenticating users, applications, and services and controlling their access to resources.

This explainer was generated by Manning's knowledge graph from the text of Build Python Web Apps with Streamlit. The section links point to the parts of the book it draws on.