SSO (Single sign-on)

What is SSO?

Single sign-on (SSO) is a sign-in method where a person signs in once with a central identity provider and can then use several applications without a separate password for each. Common identity providers are Google Workspace and Microsoft Entra ID (formerly Azure Active Directory).

Technically, SSO usually runs on open standards such as OpenID Connect, OAuth 2.0 or SAML. The application does not check a password itself; it trusts the confirmation from the identity provider.

What it means day to day:

• Fewer passwords: people remember one account instead of many.
• Central control: when someone leaves the company, they are blocked in one place.
• Consistent rules: multi-factor sign-in and password policies apply where you already maintain them.

SSO at Openbase.one

You sign in to Openbase.one with Google Workspace or Microsoft Entra ID. There is also a passwordless sign-in with an email code and, if you want, passwords: an admin sets a start password, which is changed at first sign-in and stored only as a hash. Admins can switch passwords off for the whole workspace.

SAML-based SSO is available on the Enterprise plan. Once signed in, a person works with the same permissions across every app in the workspace, including your own apps.