Setup for Single Sign-On
This feature is available for Enterprise deployments only. If you’d like to get started, please contact support@loginid.io for further details.
Follow these steps to establish a Single Sign-On (SSO) connection on your dashboard:
1. Access the SSO Settings
- Log in to your dashboard with an administrator account.
- Navigate to Organization > General.
- Select Add New SSO Provider
2. Configure OAuth/OIDC SSO Details on the Dashboard
- Register a new application in your IdP.
- Enter a Provider Name for your configuration, this will be shown to users trying to authenticate to our dashboard.
- Copy the Client ID and Client Secret from your IdP into the dashboard.
- Set the Discovery URL to the base URL of your IdP that hosts
.well-known/openid-configuration. Do not include.well-known/openid-configurationin the URL itself — enter only the base URL (e.g. if your discovery endpoint ishttps://login.example.com/.well-known/openid-configuration, enterhttps://login.example.com).
3. Complete the Connection with your Identity Provider
- Save your configuration in the dashboard.
- Copy the Redirect URI from the newly listed provider list into your IdP app.
- Save your IdP Configuration.
- Test your SSO integration by signing out, and then signing back in via SSO.
4. Inform Your Team
Once SSO is enabled, notify your team. Users will sign in using your chosen identity provider.
New Users Without an Existing Account
New users without an existing LoginID account can sign in via SSO, but the account admin must contact us beforehand to ensure the organization is configured correctly.
Setting Permissions for New SSO Users
New SSO users are added in a pending state with no permissions by default. The organization owner must grant them access:
- Navigate to Organization > Team.
- Find the pending user and open the ⋮ (three-dot) menu next to their name.
- Select Developer or Owner access to activate their account.
FAQ
Will existing dashboard accounts still work after SSO is enabled?
Yes. Existing accounts are matched automatically by email address, so users can continue accessing their accounts via SSO without any disruption.
Can we disable non-SSO sign-in methods?
Yes. Contact us and we can restrict sign-in to SSO only upon request.
Tip: For advanced configurations or troubleshooting, refer to your IdP's documentation or contact support.