Skitflow
Enterprise

Single Sign-On (SSO)

Configure SSO with OIDC or SAML providers for secure team authentication.

Skitflow Enterprise supports Single Sign-On through OpenID Connect (OIDC) and SAML 2.0, allowing your team to authenticate using your existing identity provider.

Supported Providers

  • Auth0
  • Keycloak
  • Okta
  • Azure AD / Entra ID
  • Google Workspace
  • Any OIDC or SAML 2.0 compliant provider

OIDC Configuration

  1. Navigate to Settings → Authentication → SSO
  2. Select OIDC as the protocol
  3. Provide:
    • Issuer URL — Your identity provider's issuer URL
    • Client ID — The application client ID
    • Client Secret — The application client secret
    • Redirect URI — https://<your-instance>/api/auth/callback/oidc
  4. Click Save and test the connection

SAML Configuration

  1. Select SAML as the protocol
  2. Provide:
    • SSO URL — Your IdP's SSO endpoint
    • Entity ID — The IdP entity identifier
    • Certificate — The IdP's X.509 signing certificate
  3. Configure the ACS URL in your IdP: https://<your-instance>/api/auth/callback/saml

User Provisioning

When SSO is enabled:

  • New users are automatically created on first login
  • User roles can be mapped from IdP groups to Skitflow roles
  • Users can still use email/password as a fallback (configurable)

License Keys

Manage and activate Enterprise license keys for your Skitflow instance.

Custom Roles

Create roles with granular permissions beyond the default Owner, Admin, and Member roles.

On this page

Supported ProvidersOIDC ConfigurationSAML ConfigurationUser Provisioning