// Generated by orrery. Edit the diagram spec and re-render instead of editing this file. import { type SVGProps, useId } from "react"; export default function MultiCloudWithASharedIdentityProvider(props: SVGProps) { const uid = useId().replace(/[^A-Za-z0-9_-]/g, ""); return ( Multi-cloud with a shared identity provider Multi-cloud with a shared identity provider. 12 components in 10 groups. Connections: Okta to AWS Cloud (SAML); Okta to Google Cloud (OIDC); Okta to Microsoft Entra tenant (SAML); Amazon EKS to Direct Connect gateway; Direct Connect gateway to AWS Direct Connect; BigQuery to Cloud Router (Private Google Access); Cloud Router to Partner Interconnect; Azure App Service to Private endpoint (Private Link); Private endpoint to ExpressRoute gateway; ExpressRoute gateway to Azure ExpressRoute; AWS Direct Connect to Colocation router (private VIF); Partner Interconnect to Colocation router (VLAN attachment); Azure ExpressRoute to Colocation router (private peering). MULTI-CLOUD WITH A SHARED IDENTITY PROVIDER One Okta tenant signs users in to AWS, Google Cloud and Azure; private interconnects meet at a colocation router SAML SAML OIDC SAML PRIVATE GOOGLE ACCESS PRIVATE LINK PRIVATE VIF VLAN ATTACHMENT PRIVATE PEERING AWS CLOUD GOOGLE CLOUD MICROSOFT ENTRA TENANT US-EAST-1 PROJECT ANALYTICS AZURE SUBSCRIPTION ORDERS VPC 10.10.0.0/16 VPC NETWORK RG-PARTNER-PORTAL VNET-PARTNER 10.20.0.0/16 OKTA Workforce identity AMAZON EKS Amazon Elastic Kubernetes Service DIRECT CONNECT GATEWAY BIGQUERY Analytics CLOUD ROUTER AZURE APP SERVICE Partner portal PRIVATE ENDPOINT App Service EXPRESSROUTE GATEWAY AWS DIRECT CONNECT PARTNER INTERCONNECT AZURE EXPRESSROUTE COLOCATION ROUTER BGP to every cloud NETWORK LINK, TRAFFIC BOTH WAYS FEDERATED SIGN-IN ); }