Single Sign On (SSO) | Users & Permissions

Single Sign On (SSO)

planned

Mario Aldayuz

Single sign-on capability to allow for apps loaded as iFrames to automatically have user signed in. Would allow for enhancement of the integrations without a true integration.

April 29, 2022

Hagard Wei

Need SSO badly then our clients do not need to sign in "another" system

Robert Madsen

Integration with Microsoft Entra ID (formerly Azure Active Directory)

Manuel Lara

This is a basic feature these days to consider GHL enterprise level. I use Auth0 as login provider and I am not able to SSO my customers into their GHL subaccounts. I think we have plenty of votes. Any ETA?

Donald Moore

The only way to log a user in via OAuth 2.0 is with an Authorization Code. All we have to do is add a

code

to the current SSO Object.

Suleman Uzair

It is live now: https://ideas.gohighlevel.com/changelog/sso-in-our-developer-app-marketplace

Mike Lisi

Suleman Uzair: Is there any documentation available on how to access this information from within the iframe?

Michael Walsh

Any word on this? Is there an estimated date of launch?

Mahesh Yadav

We have hosting of websites on Cloudways server and We are Using GoHighLevel. So We want SSO(Single Sign ON ) in GHL.
So when we click on a link then it will automatically login in Cloudways server so subaccount/agency holder can check details of his website like admin url, db details and website url  which already having  cloudway server.
Please suggest how can i implement?

Wallace Hamilton

I'm eagerly waiting for this! I run a membership site on WordPress, and it's crucial for my members to have a seamless experience when transitioning among my WordPress dashboard, GHL, and the client portal for the community groups.

Donald Moore

HALP!!! 🙏 I'm dying without this feature.

Donald Moore

I think at this point, I would rather just allow white-label SaaS owners to opt out of the Marketplace if they're worried about an app having a button that says "Log in with LeadConnector".

Donald Moore

Core Platform Just want to mention... I just noticed that the OP mentions iframes and I don't think it's actually possible to securely pass an authentication over the client.
Can we just get a regular OAuth flow working first and then talk about iframes? The token session is supposed to reside in HTTP-only cookies 🍪 that shouldn't be accessible by the browser.
Reference: https://security.stackexchange.com/a/63657/296596

Mel Atwood

It would be really love to see this retrofitted to API v1 with a simple REST call that returned a redirect link that automatically creates a session and logs in a user to the client app. We'd love users to gain access to our courses using an IFRAME in our back office from within our system without having to login to a separate system. But, full OAUTH and V2.0 app creation seems super heavy for something so simple.

→