Skip to main content

How to set up Single Sign-On (SSO)

This guide describes how to get Single Sign-On (SSO) enabled.

Note: Setting up SSO currently requires coordination with the Jiko team. Please reach out to account.support@jiko.com to ask for more information.

Request for the setup of a new SSO Provider

Jiko enables SSO through the OpenID Connect (OIDC) protocol. To set up SSO, customers must configure an OAuth Client. This configuration requires specifying a Redirect URI. Jiko will provide the {provider_name} parameter to use in this Redirect URI, which follows the following format: https://auth.jiko.io/api/v1/sso/provider/{provider_name}/


The necessary steps for this setup are detailed in the table below:

Step

Owner

Description

1

Customer

Contact Jiko of your intention to activate Single Sign-On (SSO) for your organization.

2

Jiko

Configure the {provider_name} needed by the customer in its configuration of the Redirect URI. Transmit this {provider_name} to the customer.

3

Customer

Configure an OAuth Client that uses the {provider_name} provided by Jiko in its Redirect URI.

4

Customer

Send to Jiko the following parameters for this OAuth Client:

  • Display name (will be shown in the UI when logging in)

  • Client ID

  • Client Secret

  • Server metadata URL

  • Scopes: which OAuth scopes are needed, usually the openid email

5

Jiko

Configure SSO based on received customer’s OAuth parameters, and inform the customer when this configuration is complete.

Did this answer your question?