17Single sign-on
Last updated
Single sign-on lets people sign in to SYNERGY Management Gateway with the identity your organisation already manages, instead of a separate password. Three methods are available, and you can use any combination of them:
| Method | How people sign in | Typical identity provider |
|---|---|---|
| SAML 2.0 | "Continue with company SSO" on the sign-in page | Microsoft Entra ID, Active Directory Federation Services, Okta and other SAML providers |
| OpenID Connect | "Continue with" followed by the provider name you configure (or "Continue with OpenID Connect") on the sign-in page | Microsoft Entra ID, Okta, Keycloak, Google and other OpenID Connect providers |
| Windows | "Continue with Windows", using the Windows account the person is already logged on with (Kerberos or NTLM) | Your own Active Directory, through IIS |
Password sign-in keeps working alongside single sign-on for accounts that have a password.
This chapter explains how to configure each method, how accounts are created and matched, how roles are assigned, and how to troubleshoot sign-in problems. For the sign-in page itself, as people see it, see Chapter 3, Signing in and your account.
In this chapter
Last updated
Thank you for your feedback.