Configure SSO access to Aternity in the Integration Settings page. Single Sign-On (SSO) allows you to bypass Aternity's sign in screen, by authenticating just once with your enterprise's chosen identity provider (IdP). Every time you access Aternity, it automatically reroutes you to the IdP, and then after authentication, it automatically routes you back to your Aternity home page as a signed in user. As such, the IdP manages the entire authentication process, which can include two-factor authentication, biometrics, or a simple password, hence Aternity does not store any passwords in the system.

When setting up SSO access with Aternity, you provide a custom subdomain to add to Aternity's web address to access the system, like https://sso.aternity.mycompany.com, where the subdomain usually indicates this is the SSO access point, or another name containing alphanumeric characters only.

To access Aternity with SSO, configure your IdP to accept authentication requests from Aternity. We support one or both of the following access methods:

• Enter a customized Aternity URL (https://sso.aternity.mycompany.com), to automatically redirect to the IdP for sign in, and then return to Aternity as a signed in user (known as SP-redirect via SP-initiated SSO).

• Users who already signed in to the IdP can select Aternity from the IdP portal, which redirects them to Aternity as a signed in user (POST bindings).

If you need to re-authenticate while using Aternity, for example, if you have been inactive for too long, the system offers you to sign in again via the IdP, and then returns you to the page you accessed last.