Get started with SSO
This guide helps team administrators set up Single Sign-On (SSO) so that members can sign in with your identity provider. Subnoto uses OpenID Connect (OIDC).
Application URIs
Section titled “Application URIs”Use these URIs when configuring your identity provider:
Redirect URI: https://app.subnoto.com/auth/oidc
Login URL: unique per configuration — open your configuration in Subnoto SSO settings to copy it.
The Login URL is optional. It enables SP-initiated SSO: when a user clicks the Subnoto tile in your identity provider’s app portal (e.g. Okta, Azure MyApps), they are sent directly to your IDP login page without having to type their email first.
Test your configuration
Section titled “Test your configuration”Before enabling SSO for the whole team, use Test SSO next to a configuration in Subnoto SSO settings to verify it works:
- Click Test SSO. You are sent to your identity provider’s sign-in page.
- Sign in at your identity provider.
- You are returned to Subnoto automatically, and the result is shown immediately: whether the authorization code and identity token were exchanged successfully, and whether the identity provider email matches your Subnoto account.
This test does not enable SSO for your team; it only checks that the configuration itself is correct. Fix any reported error (for example a token verification failure or a missing email claim) before turning the configuration on.
Provider-specific setup
Section titled “Provider-specific setup”Follow the steps for your identity provider to create an OAuth/OIDC application and obtain the Client ID, Client Secret, and Issuer URL. Then add the configuration in Subnoto Team Settings.
Need help?
Section titled “Need help?”- Contact us
- Visit subnoto.com for more information