Skip to main content

SSO (Single Sign-On)

The SSO module allows your company to use an external identity provider for authentication, so users can log in with their existing corporate credentials instead of a separate Toolbee account.

What it does​

Enterprise authentication​

When SSO is configured, users whose email domain matches your company's domain are automatically redirected to your identity provider during login. After authenticating there, they are seamlessly signed into Toolbee.

How it works​

  1. User enters their email on the Toolbee login page
  2. Toolbee detects the email domain is configured for SSO
  3. User is redirected to the company's identity provider (OAuth2/OIDC)
  4. After successful authentication, the provider redirects back to Toolbee
  5. Toolbee creates or updates the user account and logs them in

User provisioning​

SSO handles user management automatically:

  • New users are created on first login if they don't exist yet
  • Existing users have their email updated if needed
  • Department routing is supported — if the identity provider returns a valid department ID, the user is placed in the correct department

Supported protocols​

SSO uses standard OAuth2 with the following configuration:

  • Authorization URL
  • User info URL
  • Client ID and secret
  • Redirect URI
  • Custom extraction rules for mapping user attributes

Supported languages​

The identity provider can pass a language preference. Supported values: en-US, nb-NO, pl-PL, lt-LT, fi-FI, da-DK, sv-SE (falls back to en-US).

Domain exclusivity​

Each email domain can only be configured for SSO by one company. If another company has already claimed your domain, the SSO toggle will be disabled with an explanation. Contact support if you need to resolve a domain conflict.

Where you see it in the app​

  • Company Settings → Optional Modules → SSO toggle
  • Login page → automatic SSO redirect when email domain matches
  • OAuth callback page → handles the authentication response

Current status​

The SSO module is functional for authentication, but the detailed settings UI (/ssosettings) is not yet built. SSO configuration is currently handled by the Toolbee team. Contact support@toolbee.com to set up SSO for your company.

How to activate​

  1. Contact support@toolbee.com to discuss your SSO requirements
  2. The Toolbee team will configure your identity provider settings
  3. Toggle on SSO in Company Settings → Optional Modules

Pricing​

The price is shown next to the toggle in Company Settings. It is free on the Free plan.