Skip to content

Single Sign-On

With Single Sign-On (or SSO) users within your organization can login to our platform using their existing username and password. Once SSO is configured, users can select their login method via the Company Account button at our login page.

We only support SSO functionality using the OpenID Connect standard which is built on the OAuth2 protocol.

Single Sign-On Onboarding

You can take the following steps to add your organization's login to MyPup:

  1. Contact your partner manager and request Single Sign-On integration.
  2. We will provide you with partner specific redirect urls.
  3. Check which authorization flows you would like to use.
  4. Send us the configuration details we need.
  5. We will configure Single Sign-On within about two weeks after we've received the details.

Configuration details we need

Detail
Well-known URI A standard well-known discovery metadata URI which we can use to load the openid connect details. E.g.: https://yourcompany.com/oauth2/v1/.well-known/openid-configuration
Authorization Flow Your preferred Authorization flow.
Client Id Client id that is required for the authorization flow.
Client Secret
(Optional)
Only when required for the authorization flow.
Square Logo
(Optional)
A square (vector based) logo of atleast 30x30 pixels. When none provided we will try and find one online.
Login Name
(Optional)
Name as it should be shown on the button at the login page. When none provided we will use the company name by default.
Scope
(Optional)
Only when different from our default scope.
ACR Values
(Optional)
Optional extra ACR values to send with the login request.
Logout Url
(Optional)
To allow users to easily logout from MyPup and switch users, an url to a logout page of the identity provider is needed. When no logout url is specified the identity provider will not be informed about the logout request.