Single Sign-On – connect linqi to your corporate login
Every application with its own login is one more password to manage, remember and potentially get compromised. With Single Sign-On, that disappears. linqi can be connected to your existing identity provider – for example ADFS – via OpenID Connect and OAuth 2.0. Your employees sign in once, and the way into linqi is open: without second accounts, without forgotten passwords.
Technically, sign-in runs through your Security Token Service (STS): linqi delegates authentication to the identity provider, which knows the credentials and confirms the session. For your users it feels like the familiar corporate login – except that linqi is then open as well. You gain fewer password-reset tickets, faster on- and off-boarding and a clearly defined entry point into your process and approval workflows.
The entry into linqi via your existing identity
With Single Sign-On, linqi takes over your identity administration: sign-in runs through your Security Token Service – for example ADFS – via the open standards OpenID Connect and OAuth 2.0. In this mode linqi itself does not maintain separate credentials; authentication happens at the identity provider, which confirms and provides the session. For your users this means: sign in once, and linqi is there. For your IT it means: fewer passwords, clear responsibilities for identity, and a uniform entry point into processes, approvals and forms.
How sign-in with SSO works
- Connect the identity provider:
linqi is connected to your Security Token Service (e.g. ADFS) via OpenID Connect and OAuth 2.0. - Sign in at the familiar provider:
The user is redirected to your company’s identity provider and signs in there – with the known credentials. - Session is confirmed:
Your provider confirms the sign-in to linqi; a secure session is established for use. - Straight into the processes:
After sign-in, users land directly in their workspaces, processes and approvals – without a second login.
This way linqi becomes a seamless part of your IT landscape: sign-in runs through the identity you already operate – without additional account administration.
Frequently asked questions about Single Sign-On
Which standards does linqi use for SSO?
The connection runs via OpenID Connect and OAuth 2.0 – established, open standards for delegating sign-in to an identity provider.
Which identity providers are supported?
linqi connects to your Security Token Service (STS), for example ADFS. The decisive point is that the provider offers the mentioned standards.
Do users still need a linqi password?
Not in SSO mode: sign-in happens via the existing corporate login. In this mode linqi dispenses with separate credentials.
What changes during off-boarding?
When a user is disabled in the corporate login, access to linqi is also lost automatically – without having to delete or lock accounts separately on the linqi side.