Single Sign on Options

In this guide we will cover:

- How to choose which Single Sign on Method to use

Halo support various methods for setting up single sign on for accessing both the Halo agent app and portal. The best method to use will depend on your identity provider, your user base and your desired authentication protocol. Use this flow chart to determine which setup method you should use.

Do you need sign-in to be authenticated using the SAML protocol? For example, if your identity provider only uses the SAML authentication protocol, or if SAML is your preferred method over OIDC.

▼

Which identity provider are the users (who will be using single sign-on) held in?

Google

▼

Use the Single Sign-On module, creating a connection with the type "Google".
Guide here

Entra ID

▼

Who are you setting up single sign-on for?

People in my Entra tenant, or Entra tenants I manage. In other words, people in my own organisation or organisations I manage. (Business to business)

▼

Use the Single Sign-On module, creating a connection with the type "Microsoft Entra ID".
Guide here

External users that are not in my organisation or organisations I manage. These users should be able to sign up and sign in to my Halo portal. (Business to customer)

▼

Would you like to set up sign-on using an Entra B2C tenant? (Keep in mind Microsoft is deprecating B2C licensing.)


Yes ▼ Use the B2C single sign-on method under the Entra ID integration module. Guide here		No ▼ Use the Single Sign-On module, creating a connection with the type "Microsoft Entra External ID". Guide here

Okta

▼

Use the Single Sign-On module, creating a connection with the type "Okta".
Guide here

Other

▼

Use the Single Sign-On module, creating a connection with the type "OIDC".
Guide here

Yes

▼

Set up single sign-on using the SAML 2.0 module.
Guide here

Note: Additional single sign on setup methods are available that are not linked in this diagram, this is because these methods have been replaced by our single sign on module, which offers additional features. Therefore it is recommended to use this where supported.