Skip to content

SSO (Single Sign-On) Integrations

  • Managed deployment
  • Self-hosted

Qualytics integrates with enterprise identity providers so organizations can:

  • Use existing identity providers and authentication workflows
  • Apply corporate login, MFA, and conditional-access policies
  • Support managed and self-hosted deployments
  • Automate user provisioning and access management with Directory Sync

The configuration path depends on the deployment model and its authentication mode.

Managing Sign-In Providers in the Platform

Deployments on the new authentication mode manage sign-in from within Qualytics: users with the Admin role configure OIDC and SAML identity providers and email and password sign-in under Settings > Access > Providers, and the sign-in page shows a button for each enabled provider.

For details, see the Sign-In Providers documentation.

Note

Existing deployments keep their current sign-in method, described in the sections below, until the new authentication mode is enabled for them.

SSO for Managed Deployments

For managed deployments, SSO is configured by your Qualytics account manager using Auth0. You register Qualytics as an application in your Identity Provider and share the credentials with Qualytics. We handle the rest.

For step-by-step setup instructions, see the SSO Setup Guide.

Supported Identity Providers include:

  • Microsoft Entra ID (Azure Active Directory)
  • Okta
  • Google Workspace
  • PingFederate
  • Active Directory / LDAP
  • ADFS
  • Any OIDC or SAML 2.0 compliant provider

SSO for Self-Hosted Deployments

Self-hosted deployments have two options for authentication:

Self-hosted deployments can integrate directly with an identity provider such as Microsoft Entra ID, Okta, Keycloak, or ForgeRock using OpenID Connect (OIDC). The identity provider's login requirements govern authentication. Qualytics and user browsers must be able to reach the required identity-provider endpoints, either through public or private network paths.

OIDC authentication provides:

  • Direct integration with your enterprise IdP
  • Support for environments without public internet when IdP endpoints are privately reachable
  • Customizable claims mapping for non-standard IdP configurations

For detailed setup instructions, see the OIDC Authentication Configuration Guide.

Option 2: Auth0 Managed by Qualytics

Self-hosted customers can also use Auth0 for authentication. With this option, Qualytics manages the Auth0 infrastructure. Request Auth0 resources from your account manager and configure the provided credentials in your deployment. Auth0 supports SSO federation with all the enterprise providers listed in the managed deployment section above.

Note

Auth0 requires network egress to the Auth0 domain provided by Qualytics, typically auth.qualytics.io. It is not compatible with an environment that has no internet egress.

For detailed setup instructions, see the Auth0 Authentication Setup Guide.