Single sign-on

Apteco offers single sign-on (SSO) capabilities with several providers and protocols. SSO allows users to access multiple applications with a single set of login credentials, simplifying the experience and improving security.

Supported SSO protocols¶

OpenID Connect (OIDC)¶

OpenID Connect is a newer protocol built on top of OAuth 2.0 that provides user authentication and authorisation. Configuration with Apteco is considerably simpler than SAML, as you don't need to install and configure an Orbit login service.

See Setting up SSO with OpenID Connect to get started.

Security Assertion Markup Language (SAML)¶

SAML is a mature XML-based protocol with wide adoption in enterprise environments. To use a SAML SSO service for user authentication in Orbit, you must first configure an Orbit login service.

See Orbit login service to get started, then follow the provider-specific guide:

• Setting up SSO with Azure Active Directory
• Setting up SSO with Okta
• Setting up SSO with OneLogin

Configuration¶

Once you have set up SSO with your chosen protocol and provider, configure the Apteco software to use SSO. See Configure Apteco to use SSO.

Multi-factor authentication with SSO¶

Multi-factor authentication (MFA / 2FA) is supported through third-party Identity Providers when you configure SSO with Apteco.