WakaStart
FREN
Customization

Identity Providers (SSO)

Configure SSO connections from external directories: Google, Microsoft, Okta, SAML 2.0.

Version v1.02 min read

Identity Providers (SSO)

Single Sign-On (SSO) lets your users log in to WakaStart with their existing corporate credentials (Google Workspace account, Microsoft 365, Okta...), without having to manage an additional password.

When do you use this section?

  • You want to let your users log in with their corporate accounts (Google, Microsoft, Okta...)
  • You need to enable or disable an existing SSO connection
  • You want to synchronize accounts from an external directory

Accessing identity providers

From the main menu on the left, click Customization then Identity Providers.

The list shows the SSO connections configured for your organization, along with their status (active / inactive) and provider type.

Configuring an SSO connection

Pre-configured providers

For common providers, configuration is simplified. Click + Add a provider and select:

  • Google: sign in via a Google Workspace account
  • Microsoft: sign in via a Microsoft 365 / Azure account
  • GitHub: sign in via a GitHub account
  • Facebook: sign in via a Facebook account

Follow the guided steps for each provider.

SAML 2.0 configuration

For enterprise identity providers that use the SAML 2.0 standard (Okta, Ping Identity, ADFS...):

  1. Select the SAML 2.0 type.
  2. Enter the information provided by your IT department:
    • Sign-in service URL: the address to which WakaStart sends authentication requests
    • Sign-out URL: the address used when signing out (optional)
    • Signing certificate: the certificate provided by your identity provider to verify the authenticity of exchanges (optional)
  3. Click Save.

OpenID Connect configuration

For providers compatible with OpenID Connect, select the OpenID Connect type and follow the guided steps.

Managing an existing connection

For each configured provider, the following actions are available:

  • Enable / Disable: immediate control of the connection
  • Synchronize: forces an update from the external directory
  • Edit: adjust the configuration
  • Delete: permanently remove the provider

Learn more