Single sign-on (SSO)
Last updated
Was this helpful?
Last updated
Was this helpful?
Tonic Structural supports integrations with several external single sign-on (SSO) providers to allow users to use SSO to create accounts and log in to Structural.
You first complete the configuration in your SSO provider, then configure the connection in Structural
For self-hosted instances, the SSO configuration takes the form of environment settings.
On Structural Cloud, the SSO configuration is on the Access Management tab of Structural Settings view.
To only allow SSO authentication:
On self-hosted instances, set the REQUIRE_SSO_AUTH to true.
On Structural Cloud, under Login methods, check the Require SSO for login checkbox.
When you require SSO authentication, Structural disables standard email/password authentication. All account creation and login is handled through your SSO provider. If multi-factor authentication (MFA) is set up with your SSO, then all authentication must go through your provider's MFA.
To use SSO in Structural, you must have a valid license for the SSO functionality. You must also configure Structural environment variables. The required variables differ by provider.
User authentication
How SSO users create Structural accounts and log in to Structural.
Limit groups for Structural
Identify SSO groups that are displayed in Structural.
View the list of groups
View the list of SSO groups for which users have logged in to Structural.
AWS IAM Identity Center
Integrate with AWS IAM Identity Center to manage Structural users.
Duo
Integrate with Duo to manage Structural users.
GitHub
Integrate with GitHub to manage Structural users.
Google Account SSO
Integration with Google Account SSO to manage Structural users.
Keycloak
Integrate with Keycloak to manage Structural users.
Microsoft Entra ID
Integrate with Microsoft Entra ID (previously Azure Active Directory) to manage Structural users.
Okta
Integrate with Okta to manage Structural users.
OpenID Connect (OIDC)
Integrate with OpenID Connect to manage Structural users.
SAML
Integrate with a SAML-based provider to manage Structural users.