Configuring SSO with External Login

Overview

When you implement single sign-on (SSO) by using an external login, users can choose to log in by using Facebook Connect, or Google OpenID Connect.

This article provides instructions on enabling SSO with:

• Facebook Connect
• Google OpenID Connect

Information

You can enable either external login or externally accessible groups. Before you configure SSO, make sure you have a migration strategy for your existing Jive users. Implementing SSO without migrating your users to your new authentication provider will orphan existing user accounts. For more information, see Understanding SSO with External Login.

To implement SSO for Jive with external logins, you set the Single Sign-On > External Login page to Enabled. If you disable an external login type after enabling it, Jive users will need to authenticate against Jive directly instead of using an external login.

To troubleshoot authentication problems, you can enable Debug Mode on the Single Sign-On > External Login page. You should disable this setting in production.

Process

Facebook Connect Configuration

Before you can enable Facebook login, you need to create an app on the Facebook for Developers site. Then you should provide your app credentials (the Application ID and secret) in the Jive application to complete SSO authentication with Facebook.

To enable Facebook authentication:

1. Navigate to Admin Console > People > Settings > SSO.
2. Under the General tab, select the Enable Username Confirmation for New Users checkbox.
3. Under the Single Sign-On > External Login tab, under Facebook, provide the client ID and secret.

Google OpenID Connect Configuration

Google OpenID Connect requires an ID and secret from a Google Developers Console project. Google OpenID Connect replaces OpenID 2.0, which is no longer supported by Google. You should only need to specify a realm in case of a migration.

To enable SSO with Google:

1. Navigate to Admin Console > People > Settings > SSO.
2. Under the General tab, select the Enable Username Confirmation for New Users checkbox.
3. Under the Single Sign-On > External Login tab, under Google OpenID Connect, provide the client ID and secret.

Back to top