Configure SSO realms - Fluid Topics

Fluid Topics Integration Guide
Category
Reference Guides
Audience
public
Version
Latest

SSO (Single Sign-On) is a centralized authentication mechanism in which the client application fully delegates authentication to a trustworthy external service.

This has two main advantages:

  • The client application (for example, Fluid Topics) delegates the verification of the user's password to the SSO mechanism.
  • In an ecosystem of applications sharing the same SSO mechanism, the user is invited to authenticate only the first time. For future logins, they can authenticate almost instantaneously without any need to re-enter a password.

The complete SSO authentication process is as follows:

  1. The user's browser is redirected to the SSO login page.
  2. Once authenticated, the user is redirected back to a Fluid Topics callback page by the SSO mechanism.
  3. Fluid Topics handles security verifications to ensure that the values given by the SSO are trustworthy.
  4. Fluid Topics informs the authentication window that the user is now authenticated.
  5. The original window is updated and indicates that the user is recognized.

It is possible to implement the following SSO authentication workflow:

With an SSO realm, users in the Sign In page can sign in with SSO by selecting the configured icon, or by entering credentials:

A login form titled 'User Connection' with a yellow key icon for SSO above the email and password input fields. Below the password field is a 'Remember me' checkbox. Options include a 'Forgot password' link on the left, a red 'Cancel' button, and a blue 'Sign In' button.

  • It is possible to have multiple SSO realms configured, and each appears with its own configurable icon in the Sign In page.
  • Fluid Topics supports Just-in-Time (JIT) provisioning.