New Single Sign-On (SSO) feature for Enterprise clients
In a fast-paced corporate landscape, efficiency and security are key. Managing employee accounts across various platforms can be a time-consuming task, not to mention it could open your organization up to security vulnerabilities. That’s why we’re happy to introduce our latest feature developed especially for Enterprise clients – SAML-based Single Sign-On (SSO). Keep reading to discover its full benefits!
Understanding Single Sign-On
For those new to the concept, Single Sign-On (SSO) is a centralized authentication process commonly used by larger organizations. It allows users to access multiple applications with just one set of login credentials, like a digital passport to all essential corporate tools and services.
Streamlining account management
With SSO, users can easily navigate through various platforms without the hassle of remembering multiple passwords. For larger organizations with multiple employees or contractors, this means no more juggling accounts and worrying about unauthorized access. Once an employee’s rights are revoked centrally, they lose access to all connected systems simultaneously, giving employers peace of mind.
Introducing SAML SSO
Our SAML SSO feature operates similarly to familiar login methods like Google or Apple login but is tailored for a corporate environment. The key to SAML SSO lies in the user’s email domain, which determines their identity provider (IdP) and corresponding Team in Inoreader.
Two authentication flows
We offer two primary authentication flows for SAML SSO: SP-initiated and IdP-initiated. With the SP-initiated one, users begin the login process on our website, whereas the IdP-initiated one allows them to start directly from their corporate login portal, ensuring flexibility and ease of use.
Configuring SSO
Configuring SSO for your Team is easy. Team admins can access the Single Sign-On configuration through the Team dashboard by clicking the dropdown menu under the Team’s name and selecting Manage SSO. Then, they should simply follow the prompts to complete the setup, save their settings, and start enjoying the benefits of SSO. After the initial configuration, admins can use the Inoreader Single Sign-On URL to configure their IdP-initiated flow.
Logging in with SSO
Logging in with SSO is as simple as entering your corporate email on our dedicated SSO login page. Once authenticated through your IdP, you’ll be redirected back to Inoreader, ready to dive into your Team’s content.
Important considerations
While SSO offers unparalleled convenience and security, there are a few things to keep in mind:
- Only Team owners can modify the SSO configuration.
- Enabling SSO deactivates Inoreader authentication for all Team members except the Team admin, who retains the option to use it for emergency access.
- Once configured, new signups from your company domain will only be permitted via SSO. Team invitations are disabled, and all pending invites are deleted.
- If there are Team members using a different email domain, enabling SSO will lock them out of the Team. In such instances, you can contact our support to update their emails, or they can make the changes before the admin enables SSO for the entire Team.
- Users authenticated with SSO will have their browser sessions expire after 30 minutes upon closing the Inoreader tab. This measure ensures constant re-authentication in case of revoked rights.
- Team admins will need to manually remove users from the Team if they are no longer part of the company. Otherwise, they will still occupy a slot in your Team plan, as Inoreader cannot distinguish between temporary or permanent access disablement.
- Disabling SSO for a Team will reactivate Inoreader authentication for all members. If they have previously signed up via SSO, they will need to use the password reset function to create new passwords and log into their accounts.
A step towards enhanced efficiency
At Inoreader, we’re committed to providing solutions that empower our clients. With SSO, we’re simplifying account management and improving how Teams work together. Say goodbye to scattered user data and hello to a secure and efficient workflow with SAML Single Sign-On!
Ready to get started?
Take advantage of SSO’s power within your organization! Visit your Team dashboard to set up SSO and experience seamless account management like never before. Still not in a Team?
Note: Please be aware that the SSO login method is currently unavailable for Inoreader’s mobile apps. We’re working diligently to bring this functionality to all platforms soon.
The post New Single Sign-On (SSO) feature for Enterprise clients appeared first on Inoreader blog.