{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"Single sign-on"},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"single-sign-on","__idx":0},"children":["Single sign-on"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["There are two stages in order to run SSO via the partner API:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Create a user in our system; if a login has not been created for the corresponding user, we will return an invitation token that will need to be passed alongside the SSO request"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Redirect user to ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["/oauth/{provider}/sso?invite_token="]}," to initiate SSO."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Please reach out if you would like to use a common SSO provider, or if you would like to be added as a provider yourself."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"user-creation","__idx":1},"children":["User Creation"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Partners should call ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["GetOrCreateUser"]}," (",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/grpc/partnersharedingressservice#getorcreateuser"},"children":["gRPC"]},") to fetch the invite token."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"initiate-sso","__idx":2},"children":["Initiate SSO"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Once the user has been created in Basic Capital, partners can redirect to the SSO endpoint. If an invitation token was returned, it should be included in the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["invite_token"]}," query param. Otherwise this can be left blank."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The URLs in order to initiate SSO are as follows:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Environment"},"children":["Environment"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Admin"},"children":["Admin"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Employee"},"children":["Employee"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Production"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://employer.basiccapital.com/oauth/{provider}/sso?invite_token={token}"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://app.basiccapital.com/oauth/{provider}/sso?invite_token={token}"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Development"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://employer.basiccapital.dev/oauth/{provider}/sso?invite_token={token}"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://app.basiccapital.dev/oauth/{provider}/sso?invite_token={token}"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"redirect-uris","__idx":3},"children":["Redirect URIs"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The SSO app will need to support the following redirect URIs:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Environment"},"children":["Environment"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Admin"},"children":["Admin"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Employee"},"children":["Employee"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Production"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://employer.basiccapital.com/oauth/{provider}/sso/callback"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://app.basiccapital.com/oauth/{provider}/sso/callback"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Development"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://employer.basiccapital.dev/oauth/{provider}/sso/callback"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://app.basiccapital.dev/oauth/{provider}/sso/callback"]}]}]}]}]}]}]},"headings":[{"value":"Single sign-on","id":"single-sign-on","depth":1},{"value":"User Creation","id":"user-creation","depth":2},{"value":"Initiate SSO","id":"initiate-sso","depth":2},{"value":"Redirect URIs","id":"redirect-uris","depth":2}],"frontmatter":{"title":"Single sign-on","seo":{"title":"Single sign-on"}},"lastModified":"2026-09-14T19:48:02.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/integration-guide/single-sign-on","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}