One account for several applications
Your employees sign in to connected applications with their Workspace account. If they have already signed in, Workspace only asks for the steps that are actually missing.
Features · Apps & integrations
Central sign-in
With their Workspace account, your team also signs in to other applications. Workspace acts as an identity provider based on OAuth 2.0 and OpenID Connect. You decide in Workspace who may use which application, and revoked access also ends in the application.
Included in: Workspace
What single sign-on gives you
Access in one place
For each application, you decide who may use it. Without activation in Workspace, there is no sign-in, and you keep track of all connected applications.
Sign-out right through to the application
If someone loses access to your workspace or you revoke an activation, Workspace ends that person’s sessions. Connected applications receive the sign-out directly from the server.
Access via your company domain
Verify your email domain with a DNS record. People with a verified address on that domain then get access to the application without you having to activate each account individually.
How we connect an application
First, we check together whether your application supports sign-in via OpenID Connect and define which details about a person it should receive.
In Workspace, we register the application with its redirect URIs and its own secret.
You decide who may use the application: individual people or everyone with a verified company domain.
We configure the application to use Workspace, test sign-in and sign-out and sign off the integration with you.
What you can rely on
For sign-in, Workspace uses OAuth 2.0 and OpenID Connect with discovery, signed tokens and the authorisation code flow with PKCE. Applications with OpenID Connect support find the required details themselves.
In Workspace, each workspace has its own issuer. Sign-ins, keys and sessions remain assigned to the workspace they belong to.
Before an application receives data about an account, the person consents to the access. In their profile, under Connected applications, they can see which application uses their account and revoke access with one click.
Workspace shows an application’s secret only once, directly after it is generated, and afterwards stores only a verification value. You can renew it at any time.
An overview shows you whether everything is ready for sign-in, such as keys and redirect URIs. For each application, you see the sessions and the delivery of sign-outs.
Application by application
As the core for OpenID Connect, Workspace handles sign-in, activation and sign-out. We connect each further application individually, configure it to use Workspace and sign it off with you. We carry out this set-up as a project.
Among others, the integration has been tested with PeerTube. For Matrix and Forgejo, there are ready-made templates that we use for you during set-up.
Works together with
Connecting apps
Your own apps send feedback and support requests directly to your team in Workspace.
View app connectionSign-in and access
Second factor, invitations with a fixed role and one account for several workspaces.
View sign-inDevelopment
We connect your applications to Workspace and develop interfaces to your software.
View developmentFrequently asked questions
Which applications can be connected?
Applications that support sign-in via OpenID Connect with the authorisation code flow and PKCE. Before starting, we check together with you whether your application is one of them.
Does this replace a complete single sign-on solution?
Workspace handles sign-in, activation and sign-out for the connected applications. We set up each application individually, and Workspace does not create user accounts in the application itself. We discuss with you what else your environment needs.
What happens when someone leaves the company?
If you remove the person from your workspace or revoke their activation, Workspace ends their sessions. Applications with sign-out configured then end their session as well.
What does it cost?
We give you the price in an offer, because it depends on the scope of your project.
Let’s connect your first application
Name the application your team should sign in to via Workspace in future. We check the integration, set it up and sign it off together with you.