SSO and Authentication
How people sign in to Stairwell. Single sign-on through your existing identity provider, self-service to set up and to change later.
Stairwell authenticates people through single sign-on, using your existing identity provider. Your IdP decides who they are; Stairwell decides what they can do once they are in, through roles and environments.
SSO is self-service. You can configure it yourself from the Stairwell portal, and change it later without help. Support is available if you want it, but nothing here requires a ticket.
Where do I start?
Check your provider is supported. Supported Identity Providers lists them, with a setup guide for each. Anything speaking SAML 2.0 works even if it is not listed by name.
Do the IdP side first, using the guide for your provider, then return to Stairwell to connect it. See Configure SSO.
Changing an existing configuration is a different procedure from setting one up, because you reset the existing connection first. See Reset SSO Settings. This is the common path for a trial: trials are frequently set up on the Stairwell IdP, and moving to your own is a reset rather than a fresh configuration.
How does this relate to tokens?
It does not, and that is worth stating because the two get conflated.
SSO governs people signing in. Auth tokens govern scripts, integrations, and forwarders, which never sign in at all. Removing somebody from your IdP stops them logging in and does nothing to a token they created. Cleaning up after a departure means both: remove them from the IdP, and revoke or reassign whatever tokens carry their permissions.
What should I read next?
- Supported Identity Providers, to find your provider.
- Configure SSO, for first-time setup.
- User Roles and Types, for what happens after somebody signs in.
Updated 21 days ago