Single sign-on (SSO)
Connect Breakpoint to your identity provider with OIDC, OAuth 2.0 or SAML 2.0.
Last verified
SSO is available on Professional and Enterprise plans and is configured by an organization admin.
| Protocol | Notes |
|---|---|
| OIDC | Recommended. Tokens are verified against your provider signing keys, with issuer, audience and nonce checks. |
| OAuth 2.0 | Supported. Prefer OIDC when your provider offers it. |
| SAML 2.0 | Supported. Contact us to enable it for your organization. |
Redirect URI
Register this redirect URI in your identity provider exactly as shown:
https://breakpoint.it.com/api/auth/sso/oauth/callbackSetup flow
- In Breakpoint, open the organization settings and find Single Sign-On.
- Enable SSO and choose your provider type.
- Enter your issuer URL and discover the endpoints.
- Enter the client ID and client secret from your identity provider.
- Set scopes to openid, email and profile, and list your allowed email domains. Sign-ins from other domains are rejected.
- Save, sign out and test with Sign in with SSO.