2024.10.25 | Improved SSO Connections

External SSO Connections

We’re excited to introduce External SSO Connections, a feature that enables users to authenticate across multiple organizations using the same underlying SSO Connection. Essentially, these are cross-org SSO connections.

With External SSO Connections, developers can create a single SAML or OIDC SSO Connection that can be used to log into multiple organizations. If your customers need multiple organizations because of M&A, different business units, or whatever the reason, but have one IdP that’s shared across those, this enables them to share that same SSO connection across organizations.

In addition to a streamlined workflow, External SSO Connections also support: 

• RBAC - Includes implicit role assignments and group role assignments.

• Multiple integration options - Can be configured through the API, Backend SDKs, Frontend SDKs, Dashboard, and Admin Portal UI.

Check out our API Docs, SDK Docs, or log into the Dashboard and click Add new under Configure SSO Connections when editing an organization to get started with External SSO Connections.

Improved OIDC Connections

We’ve also made several enhancements to our OIDC Connections. These improvements provide more flexibility for developers who need advanced configurations with a convenient interface. These include new features such as: 

• Custom Scopes - Request custom scopes on a connection-level basis or through query parameters.

• Attribute Mapping - Map and propagate OIDC attributes to a member's trusted_metadata field, making it easier to manage user data across systems. Additionally, having these attributes in the trusted_metadata field allows them to be used as custom claims in our JWTs for more control over the token's content.

• Automatically Refreshed Tokens - Now supporting automatic refresh of OIDC access tokens.

Check out our API Docs or log into the Dashboard to explore the new OIDC Connection features.

Where to find us

Stytch developer Slack

Join the discussion, ask questions, and suggest new features in our official Slack!

Get support

Check out the Stytch Forum or email us at support@stytch.com