SSO

This module enables organizations to integrate external identity providers for Single Sign-On (SSO) within the platform. Currently, only SAML based SSO implementations are supported. You add a provider by uploading its metadata, then configure user and role mappings. When a provider is enabled, the login page shows a Login with button carrying the provider's name (for example Login with azure-saml). When more than one is enabled, the button reads Login with SSO and opens a Select SSO Provider window. Once set up, users can authenticate through their organization's existing identity systems.

Open Configuration Center > SSO > Manage. The SSO Providers page lists the configured providers with their Name, whether they are Enabled, and their Type (SAML). Click New Provider to add one. Use the ⋯ menu of a row to Edit or Delete a provider. Managing providers requires the SSO Settings permissions (ReadSsoConfig, WriteSsoConfig, DeleteSsoConfig).

Start with the Forestall-side settings, then follow the guide for your identity provider:

Forestall ConfigurationOneLogin ConfigurationMonoSign ConfigurationAzure Configuration