SSO is a paid feature, please make sure that you've discussed it beforehand with your Customer Success Manager to check if it's part of your license. Don't hesitate to contact your Customer Success Manager for further information.
If you'd like to have more information on what SSO is and how it works with Frontify, you can check our introduction or have a look at our FAQs.
Getting started
To enable SSO for your brand portal, go to the Customer Hub and look for the option to submit an SSO setup request (under the Ecosystem section). You will receive specific instructions on how to begin the configuration for SSO using OIDC.
Once your request is submitted, our Support team will contact you by email to complete the setup.
If you need help with your SSO configuration at any point, feel free to reach out to support@frontify.com.
OpenID Connect - Configuration requirements
In the customer hub process you can fill out the request where the following information is needed for us to proceed with the setup:
Authorization URL
Access Token URL
Client ID
Scope(s)*
Public Key Source (URL or JSON)
* Mandatory: openid profile email
* Optional: roleNames (for SSO group mapping)
The redirection URL you will need is <domain>/api/thirdparty/oidc/token
Example: If you have the domain test-frontify.com, you need to use as redirect test-frontify.com/api/thirdparty/oidc/token
Client Secret: When you submit the form, you won’t be able to provide the client secret for security reasons. This will be handled later through a more secure process, when our support team contacts you to complete the setup.
After submitting the form, our support team will contact you via email from support@frontify.com