Single Sign-On (SSO) Authentication

Author: Krasto Milchev

Last Updated: November 22, 2023 07:47

Single Sign-On (SSO) is s an authentication method that enables users to securely authenticate with multiple applications and websites by using just one set of credentials. In other words, SSO is the capability of a system to share login credentials with another system. The benefits of using SSO are the following:

You need to remember fewer passwords.
Simplifies username and password management for admins.
Reduces security risks for your organization and employees.
Increases speed to login and eases the onboarding of new employees to the system.

In OfficeRnD Hybrid, you can enable SSO for both the Web and Admin portals and enable your employees to log in using your SSO provider. The most commonly used external SSO providers by our clients are Google’s GSuite and Microsoft Azure.

Keep in mind that when you activate an SSO authentication, the following OfficeRnD Hybrid authentication services are disabled:

The standard login with an OfficeRnD Hybrid user and password
The "Reset password" links in OfficeRnD Hybrid
The token for authentication that employees receive when invited to the Members Portal.

Enable SSO Authentication

You can set up SSO with every OpenID Connect provider. Below you can find the general setup steps that are applicable for most of the providers.

1. Log in to your identity provider account.

2. Navigate to your applications.

3. Create a new application for OfficeRnD Hybrid.

4. Log-in to your Hybrid account.

5. Navigate to Settings/Integrations.

6. Look for SSO Authentication and click Activate.

sso auth 1.png

4. Next, click Configure.

5. In the dialog that opens, copy the Base URL and Return URL values and use them with your identity provider account to complete the configuration on their end.

edit auth arr.png

6. From within your identity provider, copy the Client ID, Client Secret and Discovery URL and paste them into the corresponding fields in the Edit Authentication Integration dialog shown above.

7. Enter a Title. Keep in mind that this title appears on the login button for your employees - “Login with {Title}”.

8. Activate Admin Portal SSO - enable this option in the config if you are setting up SSO for the Admin Portal as well. All you need is to copy the Return URL and paste it into the provider's application along with the Web Portal's Return URL.

activate sso.png

9. Click on Update to save the changes.

How to Set Up SSO with Specific Providers