SSO with External Identity Provider
What is SSO?
Single Sign-On (SSO) lets users log in once and access multiple systems without having to log in again. It's like having one key that unlocks many doors.
How SSO Works with Aidbox UI
Aidbox can connect to external identity providers (IdPs) like Google, Auth0, Okta, or your organization's identity system. This means:
Users log in through the identity provider they already use
The identity provider confirms who they are
Aidbox trusts this confirmation and allows the User to log in
How Aidbox Integrates with External Identity Providers
Aidbox uses a custom IdentityProvider
resource to configure and manage connections to external identity systems. This resource provides a unified way to integrate with various identity protocols.
Aidbox IdentityProvider Resource
The IdentityProvider
resource allows Aidbox to connect with external authentication systems by configuring:
Connection parameters to the external system
How to map external identities to Aidbox users
Authentication flows and redirect handling
Setting Up SSO in Aidbox
The general steps to set up SSO are:
Register Aidbox as an application with your external identity provider
Create an
IdentityProvider
resource in Aidbox with the connection detailsSet up access policies to determine what authenticated users can do
Map external user identities to Aidbox users and roles
User Experience
From the user's perspective, the login process is simple:
User clicks "Log In" in your Aidbox application
They're redirected to the identity provider's login page
After a successful login, they're sent back to Aidbox
Aidbox recognizes them and provides appropriate access
See Also
Managing Admin Access to the Aidbox UI Using Okta GroupsHow to configure Keycloak for access for AidboxUIHow to configure GitHub SSO for access to Aidbox UIHow to configure Azure AD SSO for access to the Aidbox UIHow to configure Azure AD SSO with certificate authentication for access to the Aidbox UIHow to configure Microsoft AD FS for access to the Aidbox UIHow to configure sign-in with Apple for access to the Aidbox UIHow to configure SSO with another Aidbox instance to access Aidbox UILast updated
Was this helpful?