Adding an Identity Provider (SSO)

Required User Credentials

[Flosum User] - SystemAdministrator Role

Overview

Flosum Cloud Apps provides secure, centralized access control by supporting Single Sign-On (SSO) for its applications. This feature allows users to log in with their corporate credentials, providing a seamless, secure login experience.

Flosum Cloud Apps support SSO from any identity provider that uses the OIDC/OpenID Connect protocol.

To enable SSO, you need to integrate an identity provider using the OpenID Connect (OIDC) protocol through the Global Settings app. If your organization uses different identity providers for testing and production, you can configure multiple providers.

After adding an identity provider, the login screen will display a custom SSO button. When users click this button, they will be redirected to the identity provider's login page. Once they authenticate successfully, they will be redirected back to the Flosum app they were accessing. See the following article for instructions on logging in with SSO.

• Logging In With SSO

If the SSO button you created with the Identity Provider is missing from the tenant login screen, there may be an issue with the provider details. Verify that the Identity Provider configuration matches the SSO credentials.

Identity Provider Configuration

Flosum Cloud Apps support SSO from any identity provider that uses the OIDC/OpenID Connect protocol. Each provider is configured differently, and instructions for configuring some of the main identity providers are explained in the following articles.

• Auth0 - Setting Up Identity Provider (SSO)

• AWS Cognito - Setting Up Identity Provider (SSO)

• Azure Active Directory - Setting Up Identity Provider (SSO)

• Google IDP - Setting Up Identity Provider (SSO)

To configure an identity provider for SSO with Flosum Cloud Apps, you'll need the region-specific Redirect, Callback, and Sign-Out URLs. Add the relevant URLs for each app that requires SSO. Access the URL tables by clicking the sections below.

Redirect URLs

Callback URLs

Sign-Out URLs

Adding an Identity Provider

1

Access Global Settings

1. From any Flosum Cloud App, click the App Switcher icon at the top of the left sidebar menu.

   
2. Click Global Settings.

   
3. The Global Settings app will open in a new tab.

Global Settings can also be accessed by directly logging in using your region's Global Settings URL. See the following article for login instructions.

• Log In To Global Settings

2

Create Identity Provider

1. Click Identity Providers from the sidebar menu.

2. Click Create.

   
3. Enter a Name for the identity provider.

4. Click the Type dropdown menu.

   
5. Select OPEN_ID.

   

3

Enter OpenID Information

1. Enter the Client ID of your OIDC application.

2. Enter the Client Secret of your OIDC application.

3. Enter the Issuer URL for your OpenID identity provider.

   If the Issuer URL is invalid or unreachable, the SSO Button will not appear on the login page.

   

4

Enter Button and Group Information

1. Enter a label for the SSO Button on the login page in the Button Text textbox.

   The SSO Button appears below the LOGIN button on the login page. If you use multiple identity providers, it's helpful to assign different labels to each button to prevent confusion.

2. (Optional) Click the Button Image textbox to open a file dialog and select an SVG image to display on the login page button.

   It is recommended to use an SVG image with a height of 24px.

   
3. (Optional) Click the Group dropdown menu.

4. (Optional) Select a group to automatically assign users created with this identity provider.

   

5

Save Identity Provider

• Click Save.

  
• You can review the details of the identity provider you set up and preview the SSO Button.