# Single Sign on Options

- Halo's original: https://usehalo.com/guides/3044
- This page as HTML: https://www.usehalo.co/guides/3044
- Category: Integrations > Identity Management
- Products: psa
- Last updated: 2026-11-05

---

**In this guide we will cover:**

**\- How to choose which Single Sign on Method to use**

Halo support various methods for setting up single sign on for accessing both the Halo agent app and portal. The best method to use will depend on your identity provider, your user base and your desired authentication protocol. Use this flow chart to determine which setup method you should use. 

Do you need sign-in to be authenticated using the SAML protocol? For example, if your identity provider only uses the SAML authentication protocol, or if SAML is your preferred method over OIDC.

  

  
  
  
  

No

  

▼

Which identity provider are the users (who will be using single sign-on) held in?

  

  
  
  
  
  
  
  
  

Google

  

▼

Use the Single Sign-On module, creating a connection with the type "Google".  
[Guide here](https://www.usehalo.co/guides/2667.md)

Entra ID

  

▼

Who are you setting up single sign-on for?

  

  
  
  
  

People in my Entra tenant, or Entra tenants I manage. In other words, people in my own organisation or organisations I manage. (Business to business)

  

▼

Use the Single Sign-On module, creating a connection with the type "Microsoft Entra ID".  
[Guide here](https://www.usehalo.co/guides/2667.md)

External users that are not in my organisation or organisations I manage. These users should be able to sign up and sign in to my Halo portal. (Business to customer)

  

▼

Would you like to set up sign-on using an Entra B2C tenant? (Keep in mind Microsoft is deprecating B2C licensing.)

  

|     |     |     |     |
| --- | --- | --- | --- |
|     |     |     |     |
| Yes<br><br>  <br><br>▼<br><br>Use the B2C single sign-on method under the Entra ID integration module.  <br>[Guide here](https://www.usehalo.co/guides/2443.md) |     | No<br><br>  <br><br>▼<br><br>Use the Single Sign-On module, creating a connection with the type "Microsoft Entra External ID".  <br>[Guide here](https://www.usehalo.co/guides/2667.md) |     |

Okta

  

▼

Use the Single Sign-On module, creating a connection with the type "Okta".  
[Guide here](https://www.usehalo.co/guides/2667.md)

Other

  

▼

Use the Single Sign-On module, creating a connection with the type "OIDC".  
[Guide here](https://www.usehalo.co/guides/2667.md)

Yes

  

▼

Set up single sign-on using the SAML 2.0 module.  
[Guide here](https://www.usehalo.co/guides/2285.md)

**_Note: Additional single sign on setup methods are available that are not linked in this diagram, this is because these methods have been replaced by our single sign on module, which offers additional features. Therefore it is recommended to use this where supported._**