Access

Only the Organization Owner or licensed members with the Advanced Features permission can access this area. Learn more about managing members in your organization.

1. From the left navigation, click on your Organization (icon at the bottom)
2. This will open the Organization panel, click Single Sign-On (SSO)

Use

OpenID Connect (OIDC) is an open authentication protocol that works on top of the OAuth 2.0 framework. OIDC allows Kanban Zone members to use single sign-on (SSO) to access Kanban Zone using an OpenID Identity Provider (IdP) to authenticate their identities.

Organizations within Kanban Zone can choose to enforce SSO for all members of their Kanban Zone organization or configure select members to bypass and login with their Kanban Zone email address.

What you will need

1. An Enterprise Plan in Kanban Zone
2. An OpenID Connect (OIDC) compatible Identity Provider (IdP)
3. Your IdP Issuer Url/Base Url
4. Your IdP Application Client ID
5. The Kanban Zone redirect URI – https://kanbanzone.io/login/sso/complete
   1. This is used within your IdP application setup when prompted for a redirect URI
6. Access to the Kanban Zone SSO Organization Configuration
   1. The Organization Owner of Kanban Zone will have access
   2. Any Kanban Zone member with Security Permissions will have access, for more information on permissions, see our manage members article

IdP Setup and Configuration

1. Setup your Implicit Grant and Hybrid Flows (Grant Type) to:
   1. Allow Hybrid Flow
   2. Allow ID Tokens with Implicit Grant Types

Kanban Zone Setup and Configuration

1. Navigate to the Organization Settings by clicking your avatar in the top/right and then clicking Organization Settings from the menu
2. From the left navigation, choose Single Sign-On (SSO)
   
3. Enter your Issurer URL provided by your IdP
4. Enter your Kanban Zone application client ID provided by your IdP
5. The test connection button can be used to verify your Issurer URL.
6. Choose your login behavior overrides
   1. A login behavior override allows select members of your Kanban Zone organization to use their Kanban Zone credentials to gain access to Kanban Zone and bypass using their SSO credentials
   2. Members who are added to your login behavior override lists will show a ‘Bypass’ badge in your organization member management screen. See Manage Members Organization – Badges section for more information
7. Save your changes using the SAVE button at the top right of your configuration screen

8. Once you have configured your SSO, it needs to be enabled.

Login with SSO

If SSO is enabled for your organization in Kanban Zone, members can now login using their Kanban Zone email and SSO credentials.

1. Navigate to https://kanbanzone.io/login and choose Login with SSO or navigate directly to https://kanbanzone.io/login/sso
   
   
2. Enter your email address
   1. Your IdP email address is the same as your Kanban Zone email address from your confirmed signup
   2. Your IdP will then prompt you for your password

Related Information:

• Manage Members Organization
• Login Logout