Single Sign-On With OIDC
info
SSO is an Enterprise feature. Please reach out to our support team, your sales contact, or via our slack channel if you need to enable Enterprise features as you try out Statsig.
This documentation assumes that you already have an OIDC Provider up and running.
SSO with OIDC can be configured for your Statsig Organization to continue using your company's identity store with Statsig and simplify the process for inviting your team to your Projects. Organizations are an Enterprise Tier feature.
Configuration
An Admin of an organization can configure SSO on Statsig. On your OIDC Provider you will need to specify the following for your Statsig Project:
- Sign-in redirect URI: https://console.statsig.com/sso/oidc
- Sign-out redirect URI: https://console.statsig.com
- Sign-in URI: https://console.statsig.com/sso
To enable SSO on Statsig, you will need the following from your OIDC Provider:
- OIDC Domain
- Client ID
- Client Secret
Once you have obtained all of the information mentioned above:
- Navigate to your Organization's
Basic Settingspage and click theEnablebutton for Single Sign-on.
- Provide the information acquired from your OIDC Provider into the fields in the dialog and click
Enable.
- After clicking
Enable, an SSO link will be shown that can be sent to your team to allow them to login to Statsig through your OIDC Provider.
Users that sign in through an SSO link will automatically join any Projects that have SSO enabled with the same OIDC Provider, and have access only to those Projects. Users that sign in through an SSO link will also not be able to edit or view any of their personal account settings.
Enabling Strict SSO will require that all members of a Project besides the Owner must log in to the Statsig Console through SSO with the configured provider to access the Project.