The box needs a saved client secret first. Enter the issuer URL, client ID and client secret under Settings → Single sign-on, click Save single sign-on settings, then tick Enable single sign-on and save again.
Why this happens
The checkbox needs a saved client secret first. The label on Settings → Single sign-on carries that warning. Until you store a secret, the box stays unavailable, and nothing else on the page can switch it on.
The page may also look idle if your plan does not include single sign-on. The Plan & usage tab lists the features your plan covers.
How to fix it
- Open Settings → Single sign-on.
- Type the Issuer URL from your identity provider.
- Add the Client ID and Client secret of the app you created there.
- Copy the pre-filled Redirect URI into your identity provider's list of redirect URIs.
- Click Save single sign-on settings to store the secret.
- Tick Enable single sign-on, then save again.
The secret field is a password field. Cyberlop stores it encrypted and never shows it again, so it looks blank after saving. That is normal.
Still not working?
Check that you pasted the secret without spaces and that you clicked the save button, not just left the page. Make sure your provider supports OpenID Connect. If the box is still unavailable, check that your plan includes single sign-on and that your role can change settings.
Next, see how to set up single sign-on and which providers work. Still stuck? Write to us via the contact page.
Related questions
- How do I set up single sign-on with my identity provider?
- Where do I find the redirect URI to give my identity provider?
- Which identity providers work with Cyberlop single sign-on?
- What does "Require an admin-bound SSO subject" do?
- Why can't a new SSO user sign in for the first time?
Single sign-on: set up OIDC, the redirect URI and account binding
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Error still showing?
Send us the exact message and the page you were on. We will reply with the fix.