Single Sign-On (SSO)

Orbit offers Single Sign-On (SSO) capabilities for operator users, enhancing security and streamlining access management.

Overview

Orbit offers Single Sign-On (SSO) capabilities for operator users, enhancing security and streamlining access management. This feature allows organizations to integrate their existing identity providers with Orbit, providing a seamless authentication experience for their users.

Key Features

Support for multiple identity providers
Integration with Azure Active Directory (Entra ID)
Customizable user attributes and role mapping
Automatic user creation upon first SSO login

How It Works

Orbit's SSO implementation supports the SAML 2.0 protocol. When a user attempts to log in:

They are presented with an option for Single Sign-On on the login page
The user enters their email address
Orbit determines the appropriate identity provider based on the email domain
The user is redirected to their organization's SSO login page
Upon successful authentication, the user is granted access to Orbit

Setting Up SSO

To enable SSO for your organization, you'll need to provide Orbit with the following information:

App Federation Metadata URL from your identity provider
Claim mappings for user attributes (e.g., firstname, lastname, email)
Default user role and team for new users
List of email domains associated with your organization

Orbit will then provide you with:

Identifier (Entity ID) for your identity provider to use
Reply URL (Assertion Consumer Service URL) for SAML configuration

User Management

When a user logs in via SSO for the first time, Orbit automatically creates a user account based on the information provided by your identity provider. This ensures a smooth onboarding process for new users.

Security Considerations

SSO integration enhances security by:

Centralizing user authentication
Enforcing your organization's password policies and multi-factor authentication
Simplifying user offboarding by allowing you to revoke access from a single point

Support and Configuration

For assistance with SSO configuration or to enable this feature for your organization, please contact Orbit support. Our team will guide you through the setup process and ensure a smooth integration with your existing identity management system.

How It Works

Orbit's SSO implementation supports the SAML 2.0 protocol. When a user attempts to log in:

They are presented with an option for Single Sign-On on the login page

The user enters their email address

Orbit determines the appropriate identity provider based on the email domain

The user is redirected to their organization's SSO login page

Upon successful authentication, the user is granted access to Orbit

Setting Up SSO

To enable SSO for your organization, you'll need to provide Orbit with the following information:

App Federation Metadata URL from your identity provider

Claim mappings for user attributes (e.g., firstname, lastname, email)

Default user role and team for new users

List of email domains associated with your organization

Orbit will then provide you with:

Identifier (Entity ID) for your identity provider to use

Reply URL (Assertion Consumer Service URL) for SAML configuration

Single Sign-On (SSO)

OverviewCopy Anchor Link

Key FeaturesCopy Anchor Link

How It WorksCopy Anchor Link

Setting Up SSOCopy Anchor Link

User ManagementCopy Anchor Link

Security ConsiderationsCopy Anchor Link

Support and ConfigurationCopy Anchor Link

Related articles

OverviewCopy Anchor Link

Key FeaturesCopy Anchor Link

How It WorksCopy Anchor Link

Setting Up SSOCopy Anchor Link

User ManagementCopy Anchor Link

Security ConsiderationsCopy Anchor Link

Support and ConfigurationCopy Anchor Link

Overview

Key Features

How It Works

Setting Up SSO

User Management

Security Considerations

Support and Configuration

Overview

Key Features

How It Works

Setting Up SSO

User Management

Security Considerations

Support and Configuration