Using Single Sign-On (SSO), users can access multiple accounts in the Organization with the same set of credentials.
To set up Single Sign-On,
-
Go to the Profile icon > Edit
2. In the Organization dashboard enable the Single Sign-on toggle
3. Choose from the login methods below:
-
SAML SSO - Connect to a SAML-based identity provider Okta, Onelogin for Single Sign-on.Copy the Assertion Consumer Service (ACS) URL and the Service Provider(SP) Entity ID.Enter the Entity ID provided by your identity provider.Enter the SAML SSO URL.Choose the signing options - Signed assertions and signed. response/Only signed assertions/Only signed response.Optionally provide the logout URL to which the users will be sent when they log out.Copy-paste the SAML certificate provided by your SAML Provider. This will be used for encryption/validation of assertions between your Identity Provider and Freshworks.
-
OAuth 2.0 - Industry standard protocol for authorization, commonly used as a way for Internet users to grant websites or applications access without giving them passwords.Copy the Redirect URL that the user will be redirected to once the authentication is successfulEnter the Client ID and Client secret provided by your identity providerDefine the level of access for the access tokenEnter the Authorization and Access token URLsEnter the logout and user info URL
-
Open ID Connect - Open ID Connect (OIDC) is an authentication layer on top of OAuth 2.0Copy the Redirect URL that the user will be redirected to once the authentication is successfulEnter the Client ID and Client secret provided by your identity providerDefine the level of access for the access tokenEnter the logout URLEnter the Authorization and Access token URLs
4. Click Save.
Note: Click here to read more on Single Sign-On