Enable Single Sign-on

Available on: Self-hosted Enterprise

Introduction

With Hasura Enterprise Edition, you can enable SSO (Single Sign-On) on the Hasura Console with your identity management system through the OAuth 2.0 / OpenID Connect protocol.

Hasura provides full support for OAuth 2.0 as a Single Sign-On (SSO) solution without the need for additional tooling or services. OAuth 2.0 is an industry-standard protocol that enables secure and delegated access to protected resources.

Hasura SSO can also be extended to use additional providers by leveraging Dex.

Supported from

SSO is supported from versions v2.24.0-beta.1 and above.

Note

We only support the Proof Key for Code Exchange extension to prevent CSRF and authorization code injection attacks.

Guides

To get started, either use our general configuration guide or follow the specific instructions for your identity provider:

• Single Sign-on configuration
• Enable ADFS Single Sign-on
• Enable Auth0 Single Sign-on
• Enable Azure AD Single Sign-on
• Enable Google Workspace Single Sign-on
• Enable LDAP Single Sign-on
• Troubleshooting