Single Sign-On (SSO)

Single Sign-On (SSO)

Let your organization's users sign in to Kensho with your identity provider.

Guides

  • SAML 2.0: configure SAML SSO from your IdP.
  • OIDC: configure OIDC SSO from your IdP.

Provisioning

Kensho provisions accounts just-in-time (JIT): the first time one of your users signs in through SSO, Kensho creates their account from the attributes your IdP sends.

Automatic account syncing and deprovisioning (SCIM) is not currently supported.