> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codewire.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# Custom login provider

> Configure a custom OAuth/OIDC provider for your Coder instance

By default, your Coder instance uses **CodeWire SSO** — users sign in through CodeWire and are automatically authenticated with Coder. You can override this with a custom OAuth/OIDC provider.

## Default: CodeWire SSO

With the default setup:

* Users sign in to CodeWire with email/password
* CodeWire issues tokens that Coder accepts automatically
* No additional configuration needed

This is recommended for most teams.

## Custom OAuth provider

If your organization uses an identity provider like **Okta**, **Auth0**, **Azure AD**, or another OIDC-compatible service, you can configure it as the login provider for your Coder instance.

### Configure a custom provider

1. Go to your resource **Settings**
2. Scroll to **Advanced Settings** → **Login Provider Override**
3. Select **Custom OAuth**
4. Enter:
   * **Issuer URL** — your OIDC provider's issuer URL (e.g., `https://your-org.okta.com`)
   * **Client ID** — the OAuth client ID from your provider
   * **Client Secret** — the OAuth client secret from your provider
5. Click **Save**
6. Click **Sync Configuration** to apply the changes

<Warning>
  After saving, you must click **Sync Configuration** in Advanced Settings for the change to take effect. This re-provisions your resource with the new login settings.
</Warning>

## Switching back to CodeWire SSO

1. Go to **Advanced Settings** → **Login Provider Override**
2. Select **CodeWire SSO (default)**
3. Click **Save**
4. Click **Sync Configuration**

## Important notes

* The sync process takes 1–2 minutes while your resource is re-provisioned
* Existing Coder sessions may be invalidated when switching providers
* Make sure your OIDC provider is configured to allow redirects to your resource domain