Single Sign On
Senseye PdM supports the following single sign on (SSO) protocols:
- Active Directory / LDAP
- OAuth 2.0
- OpenID Connect
- SAML
- WS-Federation
In addition, we have specific support for the following identity providers:
- ADFS
- Google G Suite
- PingFederate
- Azure Active Directory
Requirements¶
Given the range of SSO integrations we support, this page does not go into the specifics of each integration. However, in general, Senseye will require the following information:
- The type of SSO integration that is required
- The email domain which will be used with the SSO integration
- Integration specific information; typically a URL to your identity provider's metadata file
To support SSO, there will be some level of configuration required within your identity provider, the following information is typically required:
- Senseye's relaying party is
urn:auth0.senseye
and callback URL ishttps://senseye.eu.auth0.com/login/callback
- Senseye requires name and email address for users
- Ideally the ID used for users would not contain personally identifiable information (e.g. email addresses)
- If you require request signing, please let us know and we can provide a certificate
Authentication Process¶
In diagrammatic terms, the following sequence happens when a user using SSO accesses Senseye PdM. Senseye PdM currently uses Auth0 in its authorization toolchain.