import Thumbnail from '@site/src/components/Thumbnail';

Enable Single Sign-on

<div className="badge badge--primary heading-badge">Available on: Self-hosted Enterprise</div>

Introduction

With Hasura Enterprise Edition, you can enable SSO (Single Sign-On) on the Hasura Console with your identity management system through the OAuth 2.0 / OpenID Connect protocol.

Hasura provides full support for OAuth 2.0 as a Single Sign-On (SSO) solution without the need for additional tooling or services. OAuth 2.0 is an industry-standard protocol that enables secure and delegated access to protected resources.

Hasura SSO can also be extended to use additional providers by leveraging Dex.

:::info Supported from

SSO is supported from versions v2.24.0-beta.1 and above.

:::

<Thumbnail src="/img/enterprise/sso-animated-demo.gif" alt="Console SSO demo" />

:::info Note

We only support the Proof Key for Code Exchange extension to prevent CSRF and authorization code injection attacks.

:::

Guides

To get started, either use our general configuration guide or follow the specific instructions for your identity provider:

• Single Sign-on configuration
• Enable ADFS Single Sign-on
• Enable Auth0 Single Sign-on
• Enable Azure AD Single Sign-on
• Enable Google Workspace Single Sign-on
• Enable LDAP Single Sign-on
• Troubleshooting