Go1 allows for customers to set up a Single Sign On connection to allow seamless access for their users and control who can/can’t access their Go1 platform.
Given the variety of identity providers and security concerns, we expect the customer to provide a technical expert who will execute the set-up on the customers' systems.
Why SSO?
Strengthened security
Usernames and passwords are the main target of cybercriminals. Every time a user logs in to a new application, it’s an opportunity for hackers.
SSO reduces the number of potential attacks because users only log in once each day and only use one set of credentials. Reducing login to one set of credentials improves security.
Improved usability for all users
Requiring separate usernames and passwords for each app can be a cognitive burden for employees and impact productivity. Single sign-on reduces that cognitive burden.
Seamless user access between systems
With only a few clicks, users are able to jump between systems to the Go1 Platform without barriers.
FAQs
What SSO types do you support?
SAML (most providers can connect using SAML)
Direct with Entra/Azure
SCIM (read more here)
What attributes does a customer need to send?
Please note ALL below attributes need to be set up even though there is some duplication.
What does Go1 use as a unique identifier?
Email address (See Go1 help article about updating email addresses)
Does Go1 support Just-In-Time (JIT) provisioning?
Yes, in fact, it is enabled by default for all connections but can be disabled via the Go1 platform under Settings > Configuration.
Does Go1 support System for Cross-domain Identity Management (SCIM) provisioning?
Yes, if you’re an Administrator on Go1, you can provision and manage users and groups in your Go1 portal with SCIM. Read more here.
Does Go1 support Identity Provider (IdP) initiated SSO?
Yes, this will be an option on the SSO set-up page of your Go1 platform when you set up the connection.
How do I set up an SSO connection?
You will need to have an admin account on your Go1 platform, please speak to your system administrator to get set up. From there, you can follow the steps in the appropriate guide.
Can I remove the login with email option and force users to log in with SSO?
Yes, after SSO is configured, you will have the ability to hide the login with email option via your Go1 platform under Settings > Configuration.
Please note, in some instances, custom configuration may be required on Go1’s authorisation platform Auth0. When the SSO configuration page on your Go1 platform is saved, it wipes all configurations which could lead to the SSO connection being disabled. Please speak to your CSM or Go1 support before making changes to your SSO once set up.
Related Articles:
I've configured an updated SSO connection - how do I remove the login button for my previous connection?
When you update/renew your SSO connection, your previous login button will persist temporarily on the login screen. To remove it, simply deactivate the connection using the button provided.
