Single Sign On

Glasshouse has all the usual features you'd expect from a SAML service provider such as:

• SSO - Single Sign On.
• SLO - Single Log Out.
• Attribute mappings from your identity provider to any Glasshouse custom or regular Member field.
• Support for various authentication contexts.
• Support to temporarily match on Email instead of GUID/NameId whilst getting started.
• Active mode (Automatically redirect non-signed in users to authenticate, This can be configured per IDP route making for a powerful custom solution)

Glasshouse also has some custom features that make it easy to use multiple identity providers for a single solution

• Custom IDP routing based on (Multiple IDPs per Glasshouse site):
  • Visitor's IP Address
  • Matching a visitor's IP Address based on a CIDR Range
  • Matching a visitor's IP Address based on a Regular expression
  • Matching a header's value eg. Referer
  • The ability to have a different SSO login button based on different visitors
  • The ability to have different active IDPs based on the above routing of visitors.
• Dual login support
• Custom login buttons

We have currently tested our SSO solution with the following Identity Providers for full support.

1. Auth0
2. Keycloak
3. Google Workspaces
4. AAD - (Now in use in production)

If your Identity Provider is not listed here it is very likely its still fully supported just not yet tested.