Skip to content
Helmsman
Menu

Identity provider

Zitadel

People sign in through Zitadel, the shared Fleetworks identity provider, with the authorization code flow and PKCE.

The web dashboard and the mobile app sign people in through Zitadel. The API verifies the bearer token against the issuer’s published keys and maps the user to their Organizations and Org roles.

Registration and password reset are Zitadel’s hosted pages; Helmsman has no sign-up or reset forms of its own. Machines do not use Zitadel: they use a Service account PAT.