Skip to content
English
  • There are no suggestions because the search field is empty.

Single Sign-On (SSO) Authentication Options

Our system supports SSO with Google and/or Okta, allowing users to authenticate securely without requiring multiple login credentials. By leveraging SSO, organizations can enhance security, simplify access management, and improve the user experience.

 

Note: SSO authentication applies only to the administration portal and is not used for the marketplace.

SSO with Google Authentication

Google SSO enables users to authenticate using their Google accounts. When a user logs in with Google, they are seamlessly redirected to auth.cossystems.com, which then forwards the request to Google for authentication. This process happens quickly and smoothly, ensuring minimal disruption to the user experience.

SSO with Okta Authentication

Okta is a robust identity and access management provider that allows businesses to implement secure SSO solutions. Okta authentication is entirely managed within the admin interface. While it operates differently from Google authentication, it still provides a seamless login experience.

User Identification and Matching

When logging in via Google or Okta, the system retrieves the user’s email and a unique identifier (sub). User accounts include an ExternalId field, which determines how authentication is handled:

  • If ExternalId is set, the system will attempt to match the sub value with ExternalId. If they do not match, login is denied.

  • If ExternalId is empty, the system falls back to matching users by email.

For further details or troubleshooting, please contact COS support.