PARTNER ADMIN GUIDE
Configure single sign-on
Use Greentic-managed SSO or connect an external OpenID Connect identity provider.
Partnership administrator5 min read
Scope: individual tenant
Identity service options
The SSO tab determines which identity service the tenant uses.
- None
- The tenant does not use SSO.
- Greentic SSO
- Greentic manages the OIDC client. The administrator selects the identity service and activates or re-provisions the tenant client.
- External OIDC
- The customer supplies and manages its own OpenID Connect configuration.
Configure Greentic SSO
- 1Open the tenant.
- 2Select Access.
- 3Open SSO & users.
- 4Select the SSO tab.
- 5Choose Greentic SSO.
- 6Confirm the OIDC issuer.
- 7Save the SSO configuration.
- 8Provision or re-provision the SSO client when required.
- 9Confirm that the SSO client status is Active.
Do not treat SSO as ready too earlySSO is not usable until the SSO client shows an Active status.
Re-provisioning refreshes the managed client and may also re-pull the tenant's users and teams from the identity service.
Related guides
Choose a sign-in methodEnable local password login or prepare the tenant for single sign-on.4 min readConfigure email domainsRoute users from recognised company domains to the tenant's SSO configuration.4 min readAdd and manage usersCreate local tenant users and review identities provisioned through the identity service.4 min read