<commit_before>---
title: OIDC Single sign-on
---

# Single sign-on

Single sign-on (SSO) occurs when a user logs in to one client and is then signed in to other clients automatically.
In the context of the OIDC-conformant authentication pipeline, SSO must happen at the authorization server (i.e. Auth0) and not client applications.
This means that for SSO to happen, users must be redirected to an Auth0-hosted login page.

We are planning on providing support for SSO from client applications in future releases.

## How SSO works<commit_msg>Add panel for main article<commit_after>---
title: OIDC Single sign-on
---

# Single sign-on

<%= include('./_about.md') %>

Single sign-on (SSO) occurs when a user logs in to one client and is then signed in to other clients automatically.
In the context of the OIDC-conformant authentication pipeline, SSO must happen at the authorization server (i.e. Auth0) and not client applications.
This means that for SSO to happen, users must be redirected to an Auth0-hosted login page.

We are planning on providing support for SSO from client applications in future releases.

## How SSO works
{'fraction_non_alphanumeric': 0.06349206349206349, 'fraction_numerical': 0.003527336860670194, 'mean_word_length': 4.112612612612613, 'pattern_counts': {'":': 0, '<': 4, '<?xml version=': 0, '>': 4, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '2270968', 'n_tokens_mistral': 309, 'n_tokens_neox': 304, 'n_words': 168}