Security

Single Sign-On (SSO) – Overview

Learn how Single Sign-On (SSO) works in Calentix and how organizations can benefit from it.

191 views0 found this helpful

What is Single Sign-On (SSO)?

Single Sign-On allows employees to log in to Calentix using their existing company credentials without needing to create a separate password. Calentix supports two types of SSO:

  • OAuth SSO (Google, Microsoft) - Available for all users without additional configuration.

  • Enterprise SAML SSO - For companies with their own identity providers (Okta, Azure AD, Google Workspace, etc.).

Benefits of SSO

  • Increased Security: Employees use their centrally managed credentials. No weak or forgotten passwords.

  • Easier Onboarding: New employees can log in immediately without separate registration.

  • Centralized Control: IT administrators control access via the identity provider. If an employee is deactivated there, they automatically lose access to Calentix.

  • Compliance: SSO helps with adhering to security policies and auditing requirements.

OAuth SSO (Google & Microsoft)

Any Calentix user can authenticate via the “Sign in with Google” or “Sign in with Microsoft” buttons on the login page. This requires no additional configuration by administrators.

Enterprise SAML SSO

For companies using centralized user management through an identity provider (IdP) like Okta, Azure AD, or Google Workspace, Calentix offers Enterprise SAML SSO. This allows:

  • All login methods to be restricted to SSO (disabling email/password and OAuth)

  • New employees to be automatically added as team members

  • Access to be centrally controlled via IdP

Learn more in the article Set up Enterprise SAML SSO.

Restrict Login Methods per Organization

As an organization administrator, you can define under Team Settings → Security which login methods are allowed for the organization. Possible options:

  • Google OAuth

  • Microsoft OAuth

  • Email & Password

  • Enterprise SSO (SAML)

For example, if only “Enterprise SSO” is activated, employees can only log in via the identity provider. All other methods are automatically blocked.

Interested in Enterprise SSO?

Enterprise SAML SSO must first be enabled for the organization by our team. A request form is available under Team Settings → Security in the “Enterprise SSO (SAML 2.0)” section. We will get back to you as soon as possible.

War dieser Artikel hilfreich?