Single Sign On (SSO) Overview

Single Sign On (SSO) allows users to log in just one time with one set of credentials to get access to all corporate apps, websites, and data for which they have permission.

Baserow now integrates with any 3rd party SSO provider using Security Assertion Markup Language (SAML) to control who can log in and let them do so without having to sign-up to your Baserow separately.

Baserow Single Sign-On feature is a part of the Enterprise offering. Baserow Enterprise is available to both self-hosters and on the hosted Advanced plan. To learn more about Baserow paid plans, visit the pricing page.

enter image description here

Baserow Users can use Single Sign On (SSO) to maintain their user identities in a central location so they can access many services using the same user base.

In general, to configure an authentication provider for single-sign-on users will need to:

  • Obtain Client ID and Secret from your provider of choice and use them to create a new authentication provider in Baserow.
  • Know the provider’s base URL for GitLab or OpenID Connect providers.
  • Set/allow the Baserow Callback URL in your provider so that users can be safely redirected back to Baserow upon login.

SAML SSO Providers

Security Assertion Markup Language (SAML) is a security standard for managing authentication and access. When using SAML SSO, users can log in to their Baserow organization using the organization’s identity provider.

Baserow supports dedicated integrations with the following identity providers:

enter image description here

OAuth 2 SSO Providers

OAuth2 protocol provides secure delegated access without sharing the credentials. It allows users to give access to their resources hosted by a service provider, such as Facebook, without giving away credentials. It acts as an intermediary on behalf of the end user, providing the service with an access token that authorizes specific account information to be shared.

OpenID Connect SSO

OpenID Connect is an identity layer built on top of the OAuth 2.0 protocol. Its purpose is to give you one login for multiple sites. With the support of OpenID Connect, the Baserow users are now able to use ANY service that supports this exact protocol to login into the tool.

If you’re looking for something else, please feel free to make recommendations or ask us questions in our online community —we’re ready to assist you!