What is SSO (Single Sign-On)?

Abbreviation: SSO

Single Sign-On lets users authenticate once with their identity provider (IdP) and access multiple applications without re-entering credentials. osFoundry supports SAML, OIDC, and 30+ IdPs via WorkOS.

Detail

SSO replaces password-per-app with a central IdP (Okta, Microsoft Entra, Google Workspace…). Benefits: easier user provisioning, central MFA, immediate deprovisioning, audit trail. Standards: SAML 2.0 (enterprise) and OIDC (modern).

SCIM is a companion standard for automatic user provisioning — IdP changes flow into the app without manual sync.

How osFoundry approaches SSO (Single Sign-On)

osFoundry uses WorkOS for SSO with strict email-claim enforcement at the schema level — bad IdP configs cannot leak workspace IDs.

Related terms

rbac
audit-log
vpc

Related features

sso
enterprise-security