SSO (Single Sign-On)

SSO (single sign-on) lets people use one corporate account to sign in to many services. The company's identity provider (IdP), such as Okta or Microsoft Entra ID, checks who the person is, and each connected service trusts that check instead of keeping its own password.

Two protocols are common: SAML, an older XML-based standard, and OpenID Connect (OIDC), built on OAuth 2.0. When IT blocks an employee in the IdP, their access to every connected service ends.

How it works in SurveyNinja

SurveyNinja supports SSO through OpenID Connect on the Premium plan and higher. SAML isn't supported. SSO works in two ways:

• Sign-in to the account. Workspace members sign in with their corporate account. The owner can also prohibit password sign-in, so SSO becomes the only way in.
• Access to surveys. A survey opens only after the respondent signs in through your IdP. Their ID, name or email is added to the response automatically, and each person can respond once.

The account owner connects one identity provider in Profile under Login via SSO. SurveyNinja checks the session with the IdP every 5 minutes, so a user blocked there loses access here too. Steps, including setup for Okta and Microsoft Entra ID, are in SSO configuration. On-premise installations also sign in through OIDC, see box, on-prem, cloud.

Before you turn off passwords

• Invite each employee to the workspace with their corporate email. SSO sign-in works only for members.
• Test SSO sign-in in a private browser window, including with your own email. If the provider settings are wrong, nobody can sign in with a password.
• Accounts without SSO are better protected with two-factor authentication.