Setup SSO

Organization administrators can enable SSO to let users access Validin with their existing corporate login credentials from your Identity Provider (IDP - your company's authentication system).

Once SSO is enabled, standard password login is disabled for your organization.

❗️

Compatibility

Validin supports SSO only through OpenID Connect (OIDC). Other methods like SAML are not supported. Universal Logout works only through Back Channel Logout (automatic logout across all connected services).

Required information

You'll need to exchange information between Validin and your Identity Provider.

Provide this Validin information to your IDP:

• OIDC Redirect URI: https://pilot.validin.com/oidc/login
• Logout URI: https://pilot.validin.com/oidc/logout
• Application Name: "Validin Enterprise"
• Authorized Javascript Origin: https://pilot.validin.com

Get this information from your IDP:

• OpenID Provider URL (e.g., https://<your domain>.okta.com/)
• OpenID Client ID (unique identifier for your application)
• OpenID Client Secret (secure password for your application)

Configure SSO in Validin

Complete these steps as an Organization Administrator:

1. Click your name in the upper-right corner and select Manage Organization.

2. Scroll to the bottom and click Click here to enable SSO.

3. Enter your IDP credentials:

   • Provider URL
   • Client ID
   • Client Secret

4. Click Save.

Test your SSO setup

Test the configuration immediately in a new browser session:

1. Log out of Validin Enterprise.

2. Click Sign In and select Sign in with SSO.

3. You'll be redirected to your IDP login page.

4. Enter your credentials and log in.

5. You'll be redirected back to Validin Enterprise and automatically signed in.

👍

Result

User provisioning is no longer needed. New users can visit the Login Page and use SSO to create accounts automatically.

Troubleshooting

Contact Validin support if you encounter setup issues: