User authentication and groups
Tonic respects the access control policy of your SSO provider. To access Tonic, users must be granted access to the Tonic application within your SSO provider.
After SSO is enabled, users can use SSO to create an account in Tonic.
Account creation with Google SSO enabled
On future logins, users are prompted to use SSO to authenticate.
Login with Google SSO enabled
Tonic's workspace sharing feature supports sharing of workspaces with groups configured in your SSO system, when appropriately configured and with permission to read groups.
Share Workspace dialog
In the Tonic web server container, set the value of the
TONIC_SSO_GROUP_FILTER_REGEXenvironment variable to a regular expression that filters the groups that Tonic displays and allows sharing with.
.*Tonic.*allows all groups that contain the word "Tonic".