Overview
This article provides an in-depth look at Single Sign-On (SSO) logins as an alternative to email logins for the PostBeyond platform, detailing what SSO is, its benefits for organizations and end users, and the types of SSO supported by PostBeyond, including SAML SSO and Google SSO (O-Auth SSO). It also directs users to additional resources for setting up SSO with PostBeyond and integrating it with OKTA applications.
Information
Overview & Understanding SSO Logins
Learn about SSO logins for PostBeyond. This article will go over the alternative form of sign-in outside of email login for the PostBeyond platform, SSO. Specifically, we will go over:
What is SSO?
Single Sign-On (SSO) allows users to authenticate themselves through a third-party Identity Provider (IDP). SSO is a preferred method of logging in by some organizations for several reasons:
Benefits of SSO for Organizations
Increased security for organizations: Authorized user lists are easier to manage from a centralized location.
Benefits of SSO for End Users
Increased end user security: End users are not required to create and maintain additional passwords.
What are the Types of SSO Currently Enabled by PostBeyond?
SAML SSO is the process of authenticating a user for a service provider (such as PostBeyond) via a third party decided upon by the customer. Users authenticate themselves via an identity provider service (IDP) chosen by the customer who then confirms to PostBeyond that the person attempting to log into that account is in fact who they say they are.
SAML SSO
There are Different Types of SAML SSO for PostBeyond:
- Setting up SAML SSO (all IdPs but OKTA)
- OKTA PostBeyond Application Integration
- Custom OKTA Application (SAML SSO with OKTA IdP)
IMPORTANT: If you are planning on setting up OKTA applications, please see the Difference between the PostBeyond and Custom OKTA application first.
To learn more about SAML SSO and set-up, please see Single Sign-on (SSO) Through SAML.
Google SSO (or O-Auth SSO)
O-Auth SSO works the same way as SAML SSO except there is pre-existing trust between the service provider and the IDP. In the case of Google SSO, PostBeyond already has trust built with Google. All we need from the customer is any trusted domains that they authorize to be used for authentication. We then associate those domains with a particular instance.
To learn more about Google SSO and set-up, please see Single Sign-on (SSO) Through Google.
Integration Articles
Below are articles related to integrating PostBeyond with OKTA applications:
- Difference between PostBeyond OKTA application & Custom OKTA application
- Setting up SAML SSO (all IdPs but OKTA)
- OKTA PostBeyond Application Integration
FAQ
What is Single Sign-On (SSO) and how does it work with PostBeyond?
Single Sign-On (SSO) is a user authentication process that allows a user to access multiple applications with one set of login credentials. With PostBeyond, SSO works by authenticating users through a third-party Identity Provider (IDP) chosen by the customer, which then confirms the user's identity to PostBeyond.
What are the benefits of using SSO for organizations and end users?
For organizations, SSO increases security by allowing them to manage authorized user lists from a centralized location. For end users, it increases security as they are not required to create and maintain additional passwords.
What types of SSO are currently enabled by PostBeyond?
PostBeyond currently supports SAML SSO, which uses a third-party IDP for user authentication, and Google SSO (or O-Auth SSO), which relies on pre-existing trust with Google and requires the customer to provide authorized domains for authentication.
Where can I find more information about setting up SSO with PostBeyond or integrating it with OKTA applications?
You can find more information and step-by-step guides on setting up SSO with PostBeyond in the articles "Single Sign-on (SSO) Through SAML" and "Single Sign-on (SSO) Through Google." For integrating with OKTA applications, refer to the integration articles provided in the main article.
Who should I contact if I need further assistance with SSO logins for PostBeyond?
If you require additional assistance with SSO logins for PostBeyond, you can contact their support team at support@postbeyond.com.