Single sign-on (SSO) allows you to authenticate users in your systems and then tell WhosOnLocation that the user has been authenticated. The user can then access WhosOnLocation without being prompted to enter separate login credentials.
When using SSO the authentication process is handled outside of the WhosOnLocation application. You verify the identity of the user and then let our application know.
WhosOnLocation supports two methods of SSO:
- Secure Assertion Mark-up Language (SAML) 2.0 – this allows you to provide SSO to WhosOnLocation using enterprise identity providers such as Active Directory and LDAP, or choose a 3rd party SAML service such as Okta, OneLogin, and PingIdentity.
- A JSON web token is forwarded by your system to securely identify the user.