What is SSO?

As the term suggests, Single Sign-On or SSO allows for user authentication and access to multiple applications or websites with a single login event. In simple terms, this feature can be referred to as One-time login.

A user logging into any application or website with the SSO feature enabled would be able to log on to other applications listed by the Service provider without the user having to key in their login credential every single time for each of the applications.

Reasons to configure Single Sign-On (SSO) in your project

There are several reasons why SSO is considered an important feature:

1. Improved security: SSO can help improve security by reducing the number of places where user credentials are stored and making it more difficult for attackers to access sensitive information.

2. Increased productivity: SSO can help increase productivity by allowing users to access the systems and applications they need quickly and easily without remembering multiple usernames and passwords.

3. Better user experience: SSO can help improve the user experience by reducing the number of times users are prompted to enter their credentials, which can be frustrating and time-consuming.

4. Simplified IT management: SSO can help simplify IT management by reducing the number of places where user credentials are stored and making managing access to systems and applications more accessible.

5. Compliance: Some industries and sectors have regulations and compliance requirements that demand SSO implementation.

6. Reduced IT costs: SSO can help reduce IT costs by reducing the need for additional hardware, software, and support required to manage multiple authentication systems.

In summary, SSO can improve security, increase productivity, enhance the user experience, simplify IT management, support compliance, and reduce IT costs.

How does SSO work?

Most websites or web applications like Document360, referred to as Service providers, have a dedicated, secure, and centralized database for user information and credentials.

To facilitate the Single Sign-On feature, an external entity, the Identity Provider or IdP, is brought in to ease the user experience in accessing the web application by authenticating the user's credentials and authorizing the access to the 'Service provider'.

Here’s a sequential rundown on how the Single Sign-on (SSO) feature works

1. The user visits the intended Service provider or application domain sign-in page

2. Redirection takes place to the Identity Provider (IdP) login page

3. The user signs in with the correct credentials

4. The IdP domain matches the user information and sends an Access token or ID token to the Service Provider

5. The validation of the Access/ID token with user information is thriving on the Service provider’s end

6. A trust relationship is established between the IdP and the Service provider

As the authentication is successful, the user is now authorized to access SSO-enabled applications within the service provider without the whole process of Signing in for each instance.

Document360 allows you to configure multiple SSO options simultaneously. This means you can set up single sign-on using various identity providers for your team and readers. For example, you might use one IdP for internal employees and another for external customers or partners. This gives your team and readers the flexibility to choose their preferred IdP for accessing both the knowledge base portal and site.

What is an IdP?

Identity Provider (IdP) is an external entity that stores and manages the identity information of users; the IdP also authenticates the users by facilitating the Single Sign-On (SSO) feature. Identity Provider handles users' credentials to log in to web applications, file servers, systems, and other digital services. Any single entity the IdP stores is called a ‘principal.’

Here are some IdP you can configure with Document360

• Okta

• Entra ID

• Google

• ADFS

• OneLogin

SSO Standards on Document360

Single Sign-On feature is established with two broad standard protocols adopted by Document360.

1. SAML 2.0

• How SAML 2.0 works?

• Enabling SAML SSO on Document360

• Removing a configured SAML SSO

  Using Okta as IdP

  1. Okta configuration as IdP for SAML

  2. Okta to Document360 SAML configuration

  Using Azure AD as IdP

  1. Configuring SAML SSO with Azure AD

  Using Google as IdP

  1. Configuring SAML SSO with Google

2. OpenId Connect

• How does OpenID Connect (OIDC) work?

• Enabling OpenID SSO on Document360

• Removing a configured OpenID SSO

  Using Okta as IdP

  1. Okta configuration as IdP for OpenID

  2. Okta to Document360 OpenID configuration

  Using Auth0 as IdP

  1. Configuring OpenID SSO with Auth0