What is SSO (Single sign-on)?
By definition, Single Sign-on is an authentication scheme that allows users to log-in with a single ID and password to any of several related software systems. It is often accomplished by LDAP (Lightweight Directory Access Protocol) or SAML (Security Assertion Markup Language) Learn more about Integrating with existing SSO Providers and User Directory
How does SSO work on the mobile app?
Just like in the browser when SSO is enabled, the user will be prompted to Sign-in with SSO allowing them to be authenticated with the Identity Provider (IDP) of your choice. In this example, the user is authenticated with
Microsoft Azure through SAML protocol.
Can I use ADFS Active Directory Federation Services (ADFS) with the mobile app?
When integrating with non-Microsoft mobile application ADFS can be cumbersome, the user typically has to be authenticated on a Federation Service server within your organisation that has to be made available outside your network.
Important
To ensure connections to your ADFS IDP server are successful you will need to ensure to accept inbound connections on port TCP/443 from the IP that each user will be connecting from, alternatively, if you require users to access from anywhere, you will need to globally allow TCP/443 connections from any outbound connection.
In addition, we need to add that server address into the app so that users can open it within the app. If you are going to implement ADFS with the mobile app it is advisable to request a custom mobile app
Login with Social Account such as Google & Facebook & Twitter
Alternatively, if Social Log-in is enabled Claromentis can also be integrated allowing users to sign-in using popular websites such as Twitter, Facebook, Google and Microsoft accounts.
Users will be taken momentarily to authenticate with these sites and then redirected back to Claromentis.
Read more about SocialConnect