Single sign-on (SSO) with OIDC or SAML

Nira supports Single Sign-On (SSO), allowing users to access the platform without an additional login if they already authenticate through your existing website or web application. We integrate with any identity provider (IdP) that supports OIDC (recommended) or SAML. Examples of compatible identity providers include:

• Okta

• Auth0

• Google Workspace / GSuite

These are only a few examples. Nira supports many additional identity providers as well. If SSO is new to you, the following AWS blog post offers a helpful general overview: What is SSO (Single-Sign-On)?

Integration process

SSO integration is available as an add-on for our Growth and Enterprise plans. After enabling the add-on through your billing page, please contact us so we can assist with your configuration. We will request that you provide the following details via a secure web form:

If using OIDC (recommended option):

• Your IDP's Client ID

• Your IDP's Issuer

• Your IDP's Client Secret

If using SAML:

• Entity ID

• SAML SSO URL

• Token signing certificate

Once we receive your response, we will configure SSO for your account and then have you complete a test login to confirm the integration is functioning correctly.

User seats

Every active user takes one user seat on your plan, including users that SSO creates. Seats are added only when an Admin buys them on the Billing page.

When all seats are in use, existing users can still sign in, but a new user cannot until an Admin buys more users or disables an account that is no longer needed.