Single sign-on with OpenID Connect
Let your team sign in with your identity provider, such as Okta, Entra, Google or Auth0.
Single sign-on lets people sign in with the account they already use at work. It works with any identity provider that supports OpenID Connect, including Okta, Microsoft Entra, Google Workspace, Auth0 and OneLogin. SAML is not supported.
Set it up
- In your identity provider create a new web application and register the redirect address we show on Account, Single sign-on.
- Copy the issuer address, the client ID and the client secret into UptimeWave.
- Add the email domains your people use, for example
example.com. - Choose the role new people get: Member or Viewer. They never become admins automatically.
- Press Test, then switch it on.
Signing in
On the sign-in page choose Sign in with SSO and enter your work email. We find your organization by the domain and send you to your identity provider. The first time someone signs in, their account is created for them, if your plan has a free seat. Someone who already has an account with that email in your organization is linked to it.
Require SSO
Turn on Require SSO to stop members signing in with a password. The owner can still use a password, so you are never locked out. Turning it on signs out people who are using a password session right now.
Good to know
- Your identity provider must send a verified email address.
- Domains are claimed by the first organization to use them and public mail domains such as gmail.com cannot be claimed.
- Someone removed at your identity provider keeps their session here until an admin deactivates them.
- SSO sign-in does not ask for our two-factor code, since your identity provider is responsible for that.