SSO clients

An SSO client lets another app offer “Sign in with EventDrake”, so people can log in to that app using their account on your site. This is the reverse of single sign-on, where your site accepts logins from an outside provider.

Site Config → SSO clients

The apps allowed to sign people in with your site.

Register a client

1. Select New client and give it a name.
2. Choose a client type:
   • Confidential: a server-based app that can keep a secret safe.
   • Public: a single-page or mobile app that cannot keep a secret, and uses a secure exchange instead.
3. Add the redirect addresses the app returns people to after they sign in. These must match exactly and use a secure (https) address.
4. Choose the scopes the app may request: the account details it is allowed to see, such as email or profile.
5. Save.

The client type cannot be changed after the client is created.

The client secret

A confidential client is given a secret, shown to you once when you create it. Copy it then and store it safely, because it is not shown again. If it is lost or exposed, use Rotate secret to issue a new one, which stops the old one working.

Managing a client

• Turn a client off to stop it signing people in, without deleting it.
• You can delete a client only while it is off, because deleting an active client immediately breaks its sign-in.