External Identity Provider (SSO Federation)

1Kosmos can participate in single sign-on (SSO) in different roles depending on your scenario. Use the guide that matches your setup.

---

The role 1Kosmos plays (Service Provider, Identity Provider, or External Authentication Method) determines which side initiates and which side authenticates.

Your scenario	1Kosmos role	External system	Protocol	Guide
Sign users in to 1Kosmos using Microsoft Entra ID	Service Provider (SP)	Microsoft Entra ID (Azure)	SAML	Microsoft Azure as an External Identity Provider
Sign users in to 1Kosmos using Okta	Service Provider (SP)	Okta	SAML	Setting Up 1Kosmos as an Identity Provider
Add 1Kosmos from the Okta catalog (prebuilt app)	Service Provider (SP)	Okta	SAML	1Kosmos as a Service Provider in Okta
Use 1Kosmos to sign users in to Okta	Identity Provider (IdP)	Okta	SAML	1Kosmos as an External Identity Provider in Okta
Add 1Kosmos as an MFA method for Entra ID	External Authentication Method (EAM)	Microsoft Entra ID	OIDC	Setting up 1Kosmos as an External Authentication Method for Microsoft Entra ID

Note: Just-In-Time (JIT) provisioning is not supported. Users who need to be redirected to an external Identity Provider must be pre-created within the IdP store or connected through a directory.