This documentation assumes that you already have an OIDC Provider up and running.
SSO with OIDC can be configured for your Statsig Projects to continue using your company's identity store with Statsig and simplify the process for inviting your team to your Projects.
Owner of a Project can configure SSO for their Project on Statsig. On your OIDC Provider you will need to specify the following for your Statsig Project:
- Sign-in redirect URI: https://console.statsig.com/sso/oidc
- Sign-out redirect URI: https://console.statsig.com
To enable SSO on Statsig, you will need the following from your OIDC Provider:
- OIDC Domain
- Client ID
- Client Secret
Once you have obtained all of the information mentioned above:
- Navigate to your Project's
Basic Settingspage and click the
Enablebutton for Single Sign-on.
- Provide the information acquired from your OIDC Provider into the fields in the dialog and click
- After clicking
Enable, an SSO link will be shown that can be sent to your team to allow them to login to Statsig through your OIDC Provider.
Users that sign in through an SSO link will automatically join any Projects that have SSO enabled with the same OIDC Provider, and have access only to those Projects. Users that sign in through an SSO link will also not be able to edit or view any of their personal account settings.
Strict SSO will require that all members of a Project besides the
Owner must log in to the Statsig Console through SSO with the configured provider to access the Project.