Skip to main content

Single Sign-On (SSO)

Configure single sign-on for enterprise customers.

Supported Protocols​

Toggly supports:

  • SAML 2.0: Standard SAML authentication
  • OpenID Connect (OIDC): OAuth-based SSO

Getting Started​

To configure SSO for your organization, contact our support team at [email protected] with the following information. We'll set up the integration for you.

SSO Setup

SSO configuration is handled by our support team to ensure proper security and compliance. Once configured, your users will be able to sign in using your organization's identity provider.

SAML Configuration​

Step 1: Configure Your Identity Provider​

  1. In your IdP, create a new SAML application for Toggly
  2. Configure the following values:
    • Entity ID: https://auth.toggly.io/saml
    • ACS URL: https://auth.toggly.io/saml/acs
    • Name ID Format: Email or Persistent
  3. Download or copy the SAML metadata XML

Step 2: Provide Information to Toggly Support​

Send the following to [email protected]:

  • SAML Metadata: The metadata XML file or URL from your IdP
  • Organization Name: Your company name
  • Contact Email: Primary contact for SSO setup
  • Domain(s): Email domains that should use SSO (e.g., @company.com)
  • Attribute Mapping (if custom):
    • Email attribute name
    • Display name attribute name
    • Group/role attribute names (optional)

Our support team will configure the integration and notify you when it's ready for testing.

OIDC Configuration​

Step 1: Configure Your Identity Provider​

  1. In your IdP, create a new OIDC/OAuth application for Toggly
  2. Configure the redirect URI:
    • https://auth.toggly.io/oauth/callback
  3. Note your IdP's configuration details:
    • Issuer URL (Discovery endpoint)
    • Client ID
    • Client Secret

Step 2: Provide Information to Toggly Support​

Send the following to [email protected]:

  • Issuer URL: Your IdP's issuer/discovery URL
  • Client ID: From your IdP application
  • Client Secret: From your IdP application
  • Organization Name: Your company name
  • Contact Email: Primary contact for SSO setup
  • Domain(s): Email domains that should use SSO (e.g., @company.com)
  • Scopes (if custom): Any specific scopes required by your IdP

Our support team will configure the integration and notify you when it's ready for testing.

Attribute Mapping​

Toggly maps the following attributes from your IdP to user properties:

  • Email: User email address (required)
  • Name: User display name (optional, defaults to email)
  • Groups: User groups for role assignment (optional)

If your IdP uses different attribute names, let us know in your support request.

Testing Your SSO Integration​

Once our support team notifies you that SSO is configured:

  1. Open an incognito/private browser window
  2. Navigate to https://app.toggly.io
  3. Enter your email
  4. Complete the SSO flow with your IdP
  5. Verify you can access your Toggly account
  6. Check that your user information (name, email) is correct

If you encounter any issues, reply to the support ticket thread.

Best Practices​

  1. Test Thoroughly: Test SSO with multiple users before rolling out organization-wide
  2. Document IdP Configuration: Keep records of your IdP settings for future reference
  3. Communicate Rollout: Notify your team before enabling SSO and provide instructions
  4. Monitor Access: Review audit logs after enabling SSO to ensure users can access successfully

Next Steps​