Skip to main content

Setting Up SKAND Single Sign-On (SSO) for Your Enterprise

Updated this week

With single sign-on (SSO), users can access the SKAND web application using their organization's email and password. This eliminates the need for users to remember multiple passwords. Additionally, if a user is already signed in to their organization's network, they will not need to sign in again to access SKAND.

Scope

SKAND SSO uses the OpenID Connect (OIDC) protocol. We have currently tested and support the following Identity Providers (IdP): Microsoft Azure Active Directory

Capabilities

  1. We currently exclusively support Microsoft Azure Active Directory for SSO.

  2. Once SSO is established, you can:

    1. Manage the list of users who can access the SKAND web application via SSO within your Azure tenant.

    2. Add SKAND to your Microsoft 365 application portal for your enterprise.

  3. When a user has access and attempts to log in via SSO:

    1. A new user will be provisioned in our backend if the email is not yet registered.

    2. For a user who has already registered their email with SKAND, we will link their Azure identity to their existing user profile, allowing them to log in using either their password or SSO.

  4. If a user is removed from the access list:

    1. The user will be logged out from our application within 24 hours.

    2. The user will not be able to log in via SSO again.

Prerequisites

  • A SKAND user account with admin role.

  • An Azure AD user account with one of the following roles: Global Administrator, Cloud Application Administrator, Application Administrator, or owner of the service principal.

Enable Single Sign-On (SSO)

  1. Sign in to the SKAND application page.

  2. Ensure that you are logged in to the SKAND application as an admin user.

  3. Click the link below to review and grant permissions to the SKAND application.

    https://login.microsoftonline.com/organizations/adminConsent?client_id=be54041a-1744-4fae-9ffb-b4f97442aec9&redirect_uri=https://app.skand.io/auth/azure

  4. If not already logged in to Azure, you will be prompted to do so.

  5. Accept the permissions requested on the following page.

  6. Confirm that the SSO setup was successful by viewing the screen below:

Test Single Sign-On

  • Log out from the SKAND application and log back in via SSO.

If you encounter any issues during the setup process, please do not hesitate to contact our support team at support@skand.io for assistance. If you would like to set up a session with one of our developers, please click here to schedule a time. Thank you for choosing SKAND!

Related Articles
Integrate SKAND Reports with Microsoft Power BI
SKAND iOS Application User Manual
Did this answer your question?