Implementing SSO

What is Single Sign-On (SSO)?

SSO is a centralized authentication scheme that allows users to log in to several software systems with a single username and password. For our users, it allows for leveraging their existing Identity Provider to sign into our app.

How does it work? Is it secure?

Our SSO implementation uses the Security Assertion Markup Language (SAML) standard for exchanging identities between domains. Our application exchanges XML documents with the client's Identity Provider (Okta, Azure, etc) to securely authenticate and authorize users.

We provide secure access to our application through SSO by following a number of best practices such as enforcing session timeouts, using signed certificates and doing all transactions at the transport layer. We are using all existing non-proprietary and established technologies, providing added security through the use of digital signatures and certificates.

 

Setup & Implementation

Implementing SSO with Ontra is straightforward to implement, and requires a brief exchange of information with our Technical Support team to implement.

To begin the the SSO implementation process, please reach out to customer.care@ontra.ai. 

Note on implementation: All users associated with accounts set up for SSO must sign in with the SSO method once implemented. Post-implementation, signing in with an email and password from our sign in page will not work.