Home / Help centre / Workspace settings
Workspace settings
Which identity providers work with Cyberlop single sign-on?
Any OpenID Connect (OIDC) identity provider works. The provider's settings come from its discovery document. You only enter the issuer URL, client ID and client secret, then add Cyberlop's redirect URI to your provider. That is the whole setup.
The short version
Any identity provider that supports OpenID Connect (OIDC) works. Cyberlop reads the provider's settings from its discovery document, so you never type endpoint details by hand. Fewer fields, fewer slips.
How it works in Cyberlop
On Settings → Single sign-on you enter an Issuer URL, a Client ID and a Client secret. The help text says any OpenID Connect provider will do. The page lists several well-known names, and the field itself shows three example issuer URLs.
| Field | What to enter |
|---|---|
| Issuer URL | The address of your provider's issuer, for example https://idp.example.com |
| Client ID | The ID of the app you created in your provider |
| Client secret | The secret for that app. Cyberlop stores it encrypted |
| Redirect URI | Pre-filled. Copy it into your provider's list of redirect URIs |
Before you start, check two things with your provider. It must publish an OIDC discovery document at its issuer address, and it must let you register an app with a redirect URI. Cyberlop matches people to accounts by their verified identity.
Not sure whether yours qualifies? Look for an OpenID Connect option in its app setup. Providers that offer only an older sign-in protocol will not fit here.
What to do next
Create the app in your provider, copy the redirect URI from Cyberlop, then fill in the three fields and save. After that, tick Enable single sign-on.
Full steps live in how to set up single sign-on, and where to find the redirect URI covers the copy step. The tutorial Single sign-on walks through it too.
Related questions
- How do I set up single sign-on with my identity provider?
- Where do I find the redirect URI to give my identity provider?
- Why can't I tick "Enable single sign-on"?
- What does "Require an admin-bound SSO subject" do?
- Why aren't SSO users asked for Cyberlop's own MFA?
Single sign-on: set up OIDC, the redirect URI and account binding
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.