Enterprise Single Sign-On (SSO) with OpenID Connect

Chris -

Managing separate credentials for every team member and every tool doesn't scale. Each additional set of passwords could easily become a security liability. With Single Sign-On (SSO), you can delegate authentication to your existing identity provider, instead of requiring a separate TalkJS-managed password. So your team has one less password to worry about.

TalkJS SSO works via OpenID Connect (OIDC), so it's compatible with most major identity providers, including Okta, Google Workspace, Microsoft Entra ID (formerly Azure AD), Auth0, and Keycloak.

How it works

Once SSO is configured for your project and your domain is verified, inviting a team member is all you need to bring them on board. Instead of setting a TalkJS password, they're redirected to your own identity provider to authenticate when they accept the invite.

Getting started

To set up SSO for your project:

  1. Go to Project Settings in your TalkJS dashboard, and find the Single Sign-On (SSO) section.
  2. Select Enable single sign-on.
  3. Configure your OIDC connection, either by entering your identity provider's discovery URL to automatically fetch the required endpoints, or by entering your provider details manually.
  4. Contact us with the domain(s) you'd like to verify for SSO.

SSO is now available on the Enterprise plan.

Get started with SSO, or read more in the Single Sign-On (SSO) documentation.