Easy login with Single Sign On (SSO)

Single Sign-On (SSO) is a convenient authentication process that allows users to access multiple applications or services with just one set of login credentials (such as a username and password). Instead of using different usernames and passwords for each application, users can log in once and access all authorized resources without having to log in again each time.

How does Single Sign-On work?

1. Authentication: When a user attempts to access Plek, authentication is requested.
2. Identity Provider (IdP): Instead of Plek handling authentication directly, the user is redirected to an Identity Provider (IdP) for verification.
3. Verification: The IdP verifies the user based on their login credentials.
4. Token Generation: Once authenticated, the IdP generates a token containing information about the user's identity and permissions.
5. Token Exchange: The token is sent back to Plek, which verifies it with the IdP.
6. Access Granted: If the token is valid, Plek grants the user access without requiring further authentication.

When setting up Single Sign-On in Plek, you can easily log in using, for example, the credentials of your organization. Plek currently supports two Single Sign-On standards: SAML and OAuth.

When setting up Single Sign-On in Plek, you can easily log in using, for example, the credentials of your organization. Plek currently supports two Single Sign-On standards: SAML and OAuth.

• SAML (Security Assertion Markup Language):

  SAML is a standard protocol used for exchanging authentication and authorization data between an Identity Provider (IdP) and Plek. We exchange data based on a metadata URL.

• OAuth (Open Authorization):

  OAuth is an open standard authorization framework that enables third-party applications to access Plek on behalf of a user using an authorization token. We exchange data based on a Client ID, Client Secret, and Directory (tenant) ID.