Set up single sign-on
Business workspaces can require your company's OpenID Connect sign-in.
DocsSingle sign-on
1. Create the app at your provider
Create an OpenID Connect web app with a client secret.
Allow the openid and email scopes. Netonica requests no others.
2. Register the redirect URL once per environment
Copy the redirect URL from your workspace's SSO settings. Register it with the app exactly as shown.
The URL identifies your workspace and its Netonica site.
3. Use your tenant's or authorization server's issuer URL
Do not use shared multi-tenant issuers accepting any organisation's accounts.
Allow only your organisation's accounts, excluding outside and personal accounts.
4. Give every member access
Assign the app to every workspace member, including yourself.
With SSO on, anyone the provider refuses loses workspace access.
5. Enter the settings
In SSO settings, enter issuer URL, client ID, client secret.
Netonica stores the secret and never shows it again.
6. The provider must return your Netonica sign-in email
"Test and save" saves settings after successful provider sign-in.
"Test and turn on" also requires provider sign-in for everyone.
An error on the provider's page usually means a wrong redirect URL or client ID.
With SSO on, share your workspace sign-in link from settings.
People who leave
Remove people who leave from the workspace. That ends their access and stops their API keys at once. Disabling them only at the provider ends their sign-in within 5 days.