SSO
It is possible to log in to flatchr.io using SSO (Single Sign On) technology.
What is SSO?
SSO (Single Sign On) is a technology that allows access to different servers with a single authentication system. In short, it is a unique key that can be used to access multiple services, websites, applications...
You have all already used it!
Do you know that famous "Sign in with Google" or "Sign in with Facebook" button?
That's SSO.
To learn more about SSO you can read Martin's article, our CTO, who tells you everything about this technology!
Which SSO standards does Flatchr support?
Flatchr can integrate with tools using the SAML2 or OpenID standard. The main Enterprise Providers (GSuite, Microsoft Azure AD, ADFS, LDAP, Ping Federate) are supported by our platform.
How to enable SSO?
To enable SSO on your Flatchr account, contact your Customer Success Manager or our support team.
To help us process your request, please provide the following information:
- Which system do you use? (SAML 2.0, OpenID, Enterprise Provider)
- How many users / simultaneous connections do you expect? (A user is someone who logs in at least once per month)
- Which Enterprise Identity Provider do you use?
- Do you use a system to manage connections? (MA Active Directory, OneLogin, Google Apps, Okta ...)
Technical integration
- ADFS
- Microsoft Azure AD
Your technical team must provide us with a link of the type: https://<adfs_domainname>/FederationMetadata/2007-06/FederationMetadata.xml
You will need to ask your technical team to perform the following steps:
-
Go to Azure Active Directory, click on App registrations and fill in the following fields:
- Display name => enter Flatchr SSO
- Account types, choose Accounts in this organizational directory only
- In the Redirect URI field, enter:
https://login.flatchr.io/auth/realms/flatchr/broker/[your flatchr slug]/endpoint - Click Register
-
In the new window, go to "Certificates & secrets"
- Click New client secret
- In the description, enter flatchr and set the expiration to never
-
Click on API permissions, then Microsoft Graph and then Delegated permissions.
- Check email, profile, User>User.read, Directory.Read.All, Directory.AccessAsUser.All
- Then save
Once these steps are completed, you will need to share the following information with us:
- The application (client) ID
- The value of the generated secret (not the secret ID)
- Your Microsoft domain name
- Your AD tenant ID (Azure Active Directory tenant ID)
You can find a step-by-step visual guide at this link.