SigNoz supports single sign-on (SSO), allowing users to authenticate through an external identity provider (IdP) instead of maintaining SigNoz-specific passwords.
What’s supported
- SAML 2.0: Available on
SigNoz CloudandEnterprise Self-Hosted - OIDC: Available on
SigNoz CloudandEnterprise Self-Hosted - Google Workspace (OAuth2): Available on
Community Edition,SigNoz CloudandEnterprise Self-Hosted
How SSO works in SigNoz
At a high level, you connect your organization’s email domain to an IdP, and SigNoz defers authentication to that IdP.
- Authenticated Domain: You register a domain like
example.comunderSettings → Organization Settings → Authenticated Domains. - Choose Method: For that domain, select SAML, OIDC, or Google (for Workspace) and provide the IdP details.
- Just‑in‑Time access: Users with emails on that domain can sign in via your IdP without a prior invite. Role assignment can then be managed inside SigNoz by admins.
- SP‑initiated: User goes to SigNoz login page (
<your-instance-url>/login), enters email, and is redirected to the IdP. - IdP‑initiated: This is not supported yet.
Setup at a glance
- Go to
Settings → Organization Settings → Authenticated Domains - Add your organization’s email domain (e.g.,
example.com) - Click Configure SSO and choose a method
- Save and test from an incognito window
- Optionally toggle Enforce SSO for that domain
- If you encounter any issues, you can temporarily use password authentication by appending
?password=Yto the login URL, e.g.<your-instance-url>/login?password=Y.
Next steps
Looking for step-by-step setup? See the user guides below:
