Supersimple

Appearance

Single sign-on (SSO) ​

Supersimple supports single sign-on through OpenID Connect (OIDC). Contact Supersimple to get started.

1. Register the application ​

Register an OpenID Connect application for Supersimple with this redirect URI:

text
https://auth.supersimple.io/__/auth/handler

Supersimple requests the openid, email, and profile scopes. The application must return the email address used in Supersimple. Grant the relevant users or groups access if your provider requires it.

2. Provide the connection details ​

Provide Supersimple with:

  • Client ID
  • OIDC issuer URL, rather than the full metadata document URL
  • Client secret value
  • Email domain, for example example.com
  • Secret expiry date and rotation requirements

Contact Supersimple through your usual communication channel to arrange secure sharing of these details.

3. Approve access and test sign-in ​

Supersimple will configure the connection and ask you to test sign-in:

  1. Open Supersimple, enter your work email address, and select Continue with email.
  2. Complete sign-in and any consent prompts. If administrator approval is required, have your IT administrator approve the application, then retry sign-in.
  3. Confirm that you can access your account and let Supersimple know the test succeeded.

Supersimple will require SSO for your account after a successful test.

Renewing the client secret ​

Send a replacement secret and its expiry date before the current secret expires. Keep the existing secret active until Supersimple confirms the replacement is configured and tested.