Overview of Identity Provider (SSO)

Overview

Flosum Cloud Apps provides secure, centralized access control by supporting Single Sign-On (SSO) for its applications. This feature allows users to log in with their corporate credentials, providing a seamless, secure login experience.

Flosum Cloud Apps support SSO from an identity provider using either of the following protocols:

• OIDC (OpenID Connect)

• SAML (Security Assertion Markup Language)

To enable SSO, you need to integrate an identity provider with Flosum Cloud Apps through the Global Settings app. If your organization uses different identity providers for testing and production, you can configure multiple providers.

Logging In With SSO

When an identity provider is added to your Flosum tenant, a custom SSO button will appear on the login screen. This button redirects users to the identity provider's login page. After they authenticate, they're returned to the Flosum app. For SSO login instructions, see the following article.

• Logging In With SSO

If the SSO button you created with the Identity Provider is missing from the tenant login screen, there may be an issue with the provider details. Verify that the Identity Provider configuration matches the SSO credentials.

Add an Identity Provider

For general instructions for adding an identity provider to your tenant in Global Settings, see the following article.

• Adding an Identity Provider (SSO)

The following articles give provider-specific instructions and details for integrating your tenant with the most common identity providers.

OIDC

• Auth0 - OIDC - Configuration

• AWS Cognito - OIDC - Configuration

• Microsoft Entra ID - OIDC - Configuration

• Google IDP - OIDC - Configuration

SAML

• Microsoft Entra ID - SAML - Configuration

• Okta - SAML - Configuration

Just-In-Time Provisioning

Flosum supports Just-In-Time (JIT) Provisioning for both OIDC and SAML identity providers. JIT Provisioning automatically creates and updates user accounts in Global Settings when a user first logs in via SSO. Since the identity provider supplies user information, JIT Provisioning saves time by eliminating the need to manually create users. Your identity provider must be properly configured before you enable JIT Provisioning. See the following article to learn more about JIT Provisioning and how to configure your identity provider.

• Configuring Just-In-Time (JIT) Provisioning

SCIM Support

Flosum supports System for Cross-domain Identity Management (SCIM). SCIM lets you provision, manage, and deprovision users in your Flosum tenant through Flosum's SCIM API. To learn more about using SCIM with your tenant, see the following article.

• Configuring SCIM for Flosum