Skip to main content
Solved

Can Community SSO recognize a user already logged in on the product side?

  • March 14, 2025
  • 1 reply
  • 26 views

  • Contributor ⭐️⭐️⭐️
  • 21 replies

We use SSO so that our users have the same login credentials for our product and our community ✅

 

Does anyone know if there’s a way to make a user who is logged in to our product be automatically logged into Community?

 

Context:

We’d like to add more links to our community within product. And we’d love if it our users wouldn’t have to log in again to our community.

 

Any ideas?

Best answer by Blastoise186

Howdy ​@jwren ,

Strictly speaking, from a technical aspect there isn’t really a way to automatically log you into absolutely all SSO web apps (aka Service Providers or SP) at once as soon as someone logs into the Identity Provider (IdP), unless the IdP is on the same platform as the SP. That’s why - for example - logging into Gmail automatically logs you into YouTube, or logging into Jira logs you into Confluence/Trello/Statuspage/Bitbucket automatically - because they share the same platform and/or internal IdP. It ultimately only works “automagically” because you’re basically logged into the same account across those specific apps, whereas if you then come over to Gainsight CC, you’re logging into a different app and account entirely.

That’s not really possible when it goes between platforms - for pretty complicated technical reasons it has to be the result of a user action. However, if you’re already logged into the IdP when you attempt to SSO into something that it manages access for, it’ll go through almost instantly anyway because the IdP already knows who you are and will usually skip the request for credentials.

The API for Gainsight CC also doesn’t support remote login, only remote logout per https://api2-eu-west-1.insided.com/docs/user/#tag/User/operation/remoteLogout

Hope that helps

View original
Did you find this topic helpful?

1 reply

Blastoise186
Forum|alt.badge.img
  • Helper ⭐️⭐️⭐️
  • 538 replies
  • Answer
  • March 14, 2025

Howdy ​@jwren ,

Strictly speaking, from a technical aspect there isn’t really a way to automatically log you into absolutely all SSO web apps (aka Service Providers or SP) at once as soon as someone logs into the Identity Provider (IdP), unless the IdP is on the same platform as the SP. That’s why - for example - logging into Gmail automatically logs you into YouTube, or logging into Jira logs you into Confluence/Trello/Statuspage/Bitbucket automatically - because they share the same platform and/or internal IdP. It ultimately only works “automagically” because you’re basically logged into the same account across those specific apps, whereas if you then come over to Gainsight CC, you’re logging into a different app and account entirely.

That’s not really possible when it goes between platforms - for pretty complicated technical reasons it has to be the result of a user action. However, if you’re already logged into the IdP when you attempt to SSO into something that it manages access for, it’ll go through almost instantly anyway because the IdP already knows who you are and will usually skip the request for credentials.

The API for Gainsight CC also doesn’t support remote login, only remote logout per https://api2-eu-west-1.insided.com/docs/user/#tag/User/operation/remoteLogout

Hope that helps


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings