Connecting your IdP via OIDC

SysEleven supports connecting external identity providers (IdPs) via OpenID Connect (OIDC), allowing users to use the login using an external Identity Provider.

To connect an external IdP via OIDC, please contact our support. You will be asked to provide information about your IdP, such as the discovery endpoint, client ID and secret, PKCE support, and client authentication method.

Alpha Feature

This feature is currently only available upon request.

Login Process for Federated Accounts

Once you have connected your external IdP, any user from your federated account can log in to the SysEleven Cloud platform using their existing credentials. The user will be forwarded to your Identity Provider, after entering their email address.

A user account is created automatically upon first login. Alternatively, if you invite a user from a federated domain to join an organization, their account will be created as part of the invitation flow.

Additional account creation steps

In some cases, a federated user may additionally be asked to link their federated IdP account to their SysEleven user account. This only happens when a SysEleven account already exists, but is not yet linked to the federated IdP account. This may happen if you have had user accounts created before connecting your external IdP.

In this case, you will first be asked to link your federated account with your SysEleven account. Click on ADD TO EXISTING ACCOUNT to confirm the linking.

Next, you will have to prove ownership of the account by confirming your email address. You will see the below screen.

You will receive an email with a link to confirm the linking of the federated account. Click on the link in the email to confirm.

Now, you can log in to the SysEleven Cloud platform with a redirect to their IdP for authentication.