Meta tags:
description=About single sign-on Skovik supports SSO (Single Sign-On). The protocol we use is OpenID-Connect . This protocol works with Google Workspace, Microsoft Azure, Office 365, Okta, OneLogin, Ping Identity, Gluu, Auth0 and many others. 📘 Ready Made Integrations: If you are using one of the providers bel…;

Headings (most frequently used words):

single, sign, on, introduction, integration, scenarios, when, things, go, awry, miscellaneous, about, basic, setup, advanced, topics, ready, made, integrations, protocol, overview,

Text of the page (most frequently used words):
the (32), and (10), skovik (10), single (7), sign (7), are (7), #protocol (6), for (6), email (6), request (5), user (5), with (5), com (5), about (4), help (4), userinfo (4), openid (4), provider (4), integration (4), advanced (3), setup (3), this (3), you (3), authn (3), end (3), these (3), following (3), token (3), authorization (3), claim (3), must (3), reference (3), authentication (3), providers (3), integrations (3), https (3), guides (3), overview (2), topics (2), basic (2), page (2), identifying (2), users (2), asking (2), response (2), steps (2), endpoint (2), can (2), access (2), connect (2), specified (2), most (2), typically (2), use (2), code (2), details (2), not (2), needed (2), above (2), login (2), oidc (2), client_secret (2), values (2), takes (2), minutes (2), one (2), all (2), microsoft (2), azure (2), google (2), workspace (2), office (2), 365 (2), below (2), ready (2), made (2), changelog (2), api (2), home (2), back (2), questions (2), protected (2), copy, did, yes, updated, over, year, ago, authz, text, illustrated, diagram, returns, claims, send, responds, usually, authenticates, obtains, client, sends, abstract, follows, match, known, employee, system, otherwise, alternative, key, include, default, adjustment, required, scopes, requested, provided, initial, login_hint, response_type, flow, but, may, useful, certain, cases, section, contains, extra, implementation, basics, sufficient, native, redirect, uris, allowed, remember, protect, treat, like, password, issuer, token_endpoint, authentication_endpoint, client_id, set, only, few, complete, more, than, even, without, easy, mere, almost, complexity, handled, level, abstracted, away, using, have, that, case, instructions, instead, just, contact, supports, sso, works, okta, onelogin, ping, identity, gluu, auth0, many, others, powered, signed, receipt, links, miscellaneous, troubleshooting, when, things, awry, data, export, projects, cost, centers, synchronisation, scenarios, first, step, introduction, jump, content, agents, visit, developer, llms, txt, index, pages, formatted, markdown, endpoints, openapi,

Text of the page (random words):
single sign on for ai agents visit https developer skovik com llms txt for an index of all pages formatted in markdown and endpoints in openapi jump to content home guides api reference changelog questions email protected back to skovik com guides questions email protected back to skovik com home guides api reference changelog single sign on introduction first step integration scenarios user synchronisation projects and cost centers data export when things go awry troubleshooting asking for help miscellaneous single sign on identifying users signed receipt links powered by single sign on about single sign on skovik supports sso single sign on the protocol we use is openid connect this protocol works with google workspace microsoft azure office 365 okta onelogin ping identity gluu auth0 and many others ready made integrations if you are using one of the providers below we have ready made integrations in that case the instructions below are not needed instead just contact us and we ll help you with the setup office 365 google workspace microsoft azure ad even without one of the providers above integration is easy and takes mere minutes almost all complexity is handled at the protocol level and abstracted away by skovik and the authentication provider basic setup only a few values about the authentication provider must be specified in skovik a complete integration takes no more than 15 30 minutes the following values are set in skovik issuer token_endpoint authentication_endpoint client_id client_secret remember to protect the client_secret treat it like a password the following redirect uris must be allowed by the authorization provider https skovik com dz login oidc https skovik com dz login oidc native advanced topics this section contains extra details on the implementation the basics above are sufficient for most integrations these details are typically not needed for an integration but may be useful in certain advanced cases we use the authorization code flow response_type code the user s email is provided as login_hint with the initial request scopes openid and email are requested the email claim must match a known employee in the skovik system or otherwise an alternative claim reference key can be specified most authentication providers include the email claim by default so typically no adjustment is required protocol overview the openid connect protocol in abstract follows these steps the rp client sends a request to the openid provider op the op authenticates the end user and obtains authorization the op responds with an id token and usually an access token the rp can send a request with the access token to the userinfo endpoint the userinfo endpoint returns claims about the end user these steps are illustrated in the following diagram text 1 authn request end 2 authn authz user rp op 3 authn response 4 userinfo request 5 userinfo response updated over 1 year ago asking for help identifying users did this page help you yes no copy page about single sign on basic setup advanced topics protocol overview