¶ Overview
¶ Description
Allow users or a client enterprise to log in to door (and sign up implicitly) using the enterprise’s authentication provider
¶ Door Capabilities
Out-of-the-box Door provides the ability to authenticate using
- OIDC / Google Identity
- OIDC / Microsoft Azure AD
- SAML / Microsoft Azure AD
Other mechanisms and standards would have to be raised as a requirement with Door; and a development plan put in place.
Instructions and test environments for standard SSO setups can be provided to the client.
¶ Process
¶ Requirements
Please contact Door support the following information below to help setup SSO.
- Which SSO system do you use, e.g.
Azure/Microsoft,Google,Ping,Onelogin,Okta, etc.? - What identity provider solution are you using?
- What protocol is used? (Note: Door supports OAuth 2.0 or SAML v2.0)
- What email domain should be used for the SSO?
- Who is the contact on your side for managing the identity provider solution?
- What is your desired timeline for implementing?
¶ SSO User Flows (Technical)
- Used by OAuth / OIDC and SAML
The user comes to Door (the Service Provider) and provides a username. Based on this, Door then initiates the SSO process.
- Used by SAML
The user uses an in-house tool, such as an intranet gateway or browser extension as an entrypoint to Door. The tool goes via their IdP, which starts the SSO process.
SSO Login Flow Sequence Diagram
