DOCS / GUIDES

Single sign-on with Cage-Free SSO

Connect your identity provider and let users roam freely between apps.

Intermediate11 min read
Before you beginYou need the cluck CLI, a Pollosoft account, and a coop to work in. No prior experience required. Curiosity and a mild fondness for chickens are helpful.

Overview

Connect your identity provider and let users roam freely between apps. The whole thing takes about 11 minutes, and the commands below are the ones you will use along the way.

$ cluck sso configure --provider okta
$ cluck sso test
$ cluck sso enforce

Steps

  1. Connect your provider. Add Pollosoft as an app in your identity provider using SAML or OIDC. Copy the metadata URL into the console.
  2. Map groups. Map identity groups to flocks, so access follows people when they change teams.
  3. Test with a pilot group. Enable SSO for a small flock first, then widen. Keep one break-glass account safe for emergencies.
  4. Enforce. Once everyone is signed in, enforce SSO and disable password logins. Sleep better.

Keep going

Stuck? Check the error codes, the FAQ, or the glossary.