Enterprise SSO (OIDC)

Single Sign-On configuration & status for globalzanrefsi.org

0/4 configured
Base44 uses OIDC (OpenID Connect), not SAML. All four providers support OIDC — configure the OIDC endpoints, not SAML. Credential entry and the SSO switch live in the Base44 dashboard (App Settings → Authentication → SSO, or Workspace Settings → Auth & security). This page is an in-app status board and setup reference for your admin team.
Redirect URI
https://app.base44.com/api/apps/{APP_ID}/auth/sso/callback

Find your App ID in the Base44 editor URL (/apps/<APP_ID>/editor) or workspace settings. Register this exact URI as a redirect/sign-in URI in each identity provider.

Okta
not started

Required from IdP: Client ID, Client Secret, Okta Domain

Microsoft Entra ID (Azure AD)
not started

Required from IdP: Client ID, Client Secret, Tenant ID

Ping Identity
not started

Required from IdP: Discovery URL or Auth/Token/Userinfo/JWKS endpoints + display name

Google Workspace
not started

Required from IdP: Google Cloud OAuth 2.0 Client ID & Secret

Test the SSO login

Log out, then use the "Log in with SSO" option on the login screen. Tip: test in a private/incognito window to avoid session caching.

SSO credentials are never stored in this app — only configuration status and non-secret references are tracked.

Failed to load SSO configs
Permission denied for create operation on SsoProviderConfig entity