Implementing Single Sign-On (SSO) in a portal can save users and administrators a significant amount of time. With SSO, individuals in your network can easily log in by clicking the SSO button on the portal's login page, eliminating the need for a separate Bynder username and password.
Bynder supports various SSO methods like SAML, Google, and OpenID. SSO also allows for automatic creation of new user accounts (Just-in-Time provisioning - JIT), removing the manual account creation process for portal administrators. Users can log in using different SSO identity providers, such as SAML or Google, and select their preferred login method on the Bynder portal login page.
After configuring your SSO provider(s), you can set up a redirect to direct users to the SSO provider based on specific conditions like Visitor IP address or OAuth2 flow.
Learn more about customizing the appearance of your Login Configuration.
FAQ
What signing options are required by Bynder?
The SAML response must be signed.
What signing algorithms are supported by Bynder?
The RSA-SHA256 and RSA-SHA1 algorithms are supported, but Okta will default to the RSA-SHA256 algorithm because it is more secure.
Does Bynder support enabling force authentication?
We don't support configuring forceAuthn in the SAML request.
Does Bynder support SAML Single Logout (SLO)?
We don't support Single Logout (SLO).
What is the default relay state URL?
This value can be left empty.
Does Bynder have an OIN app in Okta?
No, we do not.
Does your SSO setup support both IdP/SP/initiated login workflows?
Yes, we support both.
Does Bynder SSO support the provisioning and deprovisioning of users?
Bynder only supports JIT provisioning, SCIM is not supported.
Is it possible to force users to only log in via SSO and not username & password?
By default users created through JIT provisioning will be restricted from setting a password, however exceptions can be made for individual users in user management.
Are licenses automatically purchased if a new user is provided with Okta?
No, if you exceed your licenses, your Customer Success Manager will contact you to provision new seats or make other changes.
Can Bynder Portal be configured as the IDP?
No, Bynder Portal cannot serve as an Identity Provider (IDP).
Can I redirect my users to another starting point for the SSO flow?
Yes, you can do so via redirect SSO Login. Learn more here.
If you have a technical issue with your SSO providers, check out the SSO Troubleshooting Logs here.
If you need technical assistance, we advise you to contact the technical support department of your SSO provider.
Note
Bynder Support doesn't have access to your SSO provider and, therefore, can't further assist you with this inquiry.
Updated