Skip to main content

Single Sign-On and Directory Sync: Overview

Learn how Wunderite SSO and Directory Sync centralize authentication, user management, and access control through your identity provider

Written by Philip MacDonald

The intended audience for this article is Agents.

Overview

Wunderite Single Sign-On (SSO) is built on WorkOS, which integrates with a number of identity providers. This integration allows agencies to use their existing identity provider to manage and authenticate users when signing in to Wunderite. It provides:

  • Seamless authentication: When users sign in with an SSO-enabled email domain, they are automatically redirected to the agency’s identity provider. Once authenticated, they are returned to Wunderite and signed in.

  • User lifecycle management through Directory Sync: Wunderite receives user and group updates from the agency’s identity provider and applies those changes in Wunderite. Instead of managing users separately in both systems, administrators can manage users' details, access, and group membership centrally through their identity provider.

  • One set of credentials: Users can access Wunderite using their existing agency credentials, eliminating the need to remember and manage a separate Wunderite password.

  • Centralized access control: Administrators can manage who has access to Wunderite through their identity provider, allowing access to be granted and removed from a central location.

  • Security alerts and monitoring: Administrators are notified when discrepancies are detected between the identity provider and Wunderite. Wunderite also provides a centralized dashboard where administrators can review and address configuration or synchronization issues.

  • Single Sign-On enforcement: Agencies can choose to require SSO for their users. When SSO is enforced, users must authenticate through the agency’s identity provider and can no longer sign in using a separate Wunderite email and password.

Supported Identity Providers

The following identity providers are supported:

  • ADP

  • Auth0

  • CAS

  • ClassLink

  • Clever OIDC

  • Cloudflare

  • Custom OIDC

  • Custom SAML

  • CyberArk

  • Duo

  • Entra ID (Azure AD) OIDC

  • Entra ID (Azure AD) SAML

  • Google OIDC

  • Google Workspace SAML

  • JumpCloud

  • Keycloak

  • LastPass

  • Login.gov

  • Microsoft AD FS

  • miniOrange

  • NetIQ

  • Okta OIDC

  • Okta SAML

  • OneLogin

  • Oracle

  • PingFederate

  • PingOne

  • Rippling

  • Salesforce

  • Shibboleth

  • Shibboleth Unsolicited

  • SimpleSAMLphp

  • VMware

If your Identity Provider is not listed, Wunderite may still support it through a Custom SAML integration.

WorkOS Documentation

For more information about WorkOS Single Sign-On see: WorkOS Single Sign-On

For more information about WorkOS Directory Sync see: WorkOS Directory Sync

Did this answer your question?