Appearance
Configure SSO Sign-In
Single Sign-On (SSO) allows your team to authenticate using your organization's identity provider. Relayter supports two SSO integration approaches: direct OpenID Connect (OIDC) integration and Auth0 as an intermediary.
SSO authentication methods
Relayter supports two ways to connect your identity provider:
Direct OpenID Connect (OIDC) integration
With direct OIDC, your organization's identity provider connects directly to Relayter. This is the preferred approach if your identity provider natively supports OIDC.
Select OpenID Connect as the platform type when creating your SSO client.
Auth0 as an intermediary
If your identity provider does not have native OIDC support, you can use Auth0 as a middleware layer to enable SSO.
Select Auth0 as the platform type when creating your SSO client.
Set up an SSO client
See Manage SSO Clients for step-by-step instructions on creating and configuring an SSO client with your chosen platform.
IdP-initiated login
Relayter supports login flows initiated from your identity provider (IdP-initiated SSO). When a user logs in through your identity provider's portal, they can be directed to Relayter using the following URL format:
https://api.relayter.com/auth/oidc/initiate?client_id=[CLIENT_ID]Replace [CLIENT_ID] with the client ID you configured for your SSO client in Relayter.
User provisioning with SCIM v2
In addition to authentication, Relayter supports automated user and group provisioning using SCIM v2 (System for Cross-domain Identity Management v2). SCIM allows your identity provider to automatically create, update, and deactivate user accounts in Relayter as your team structure changes.
See Configure an Identity Provider for details on setting up SCIM v2 provisioning.
SCIM and OIDC compatibility
Many identity platforms do not offer SCIM v2 support for modern OpenID Connect applications. SCIM provisioning typically requires legacy SAML-only application templates, which Relayter does not support.
This means:
- SSO authentication via OIDC works independently
- User provisioning via SCIM may not be available simultaneously with your chosen OIDC provider
If you need both authentication and provisioning, check your identity provider's documentation to see if they support SCIM with OIDC applications, or consider using Auth0 as an intermediary which may provide different integration options.
Not supported
Relayter does not support SAML-based authentication or SCIM configurations that depend only on SAML-only application templates.