Introduction

EyeQuestion supports Single Sign-On (SSO), allowing users to access the platform using their existing organisational login credentials.
With SSO, users authenticate once through their organisation’s Identity Provider (IdP) and can access EyeQuestion without needing a separate username and password.

This improves security, simplifies onboarding, and reduces the need for manual account management.

What is SSO?

Single Sign-On (SSO) is a user authentication process that enables users to log in once and gain access to multiple applications.
Instead of managing separate credentials for EyeQuestion, users authenticate through their organisation’s central identity system.

Authentication methods supported by EyeQuestion

EyeQuestion supports multiple ways to enable secure SSO, depending on your organisation’s identity infrastructure.
These include:

1. OpenID Connect (OIDC)

• Secure SSO

• User identity verification

• Profile information sharing (e.g., email, name)

2. SAML 

SAML is a widely used authentication standard commonly found in enterprise identity setups. It also enables secure SSO and is ideal for organisations that already use SAML for other internal systems.

SCIM (User Provisioning)

SCIM is not an authentication method but is often used together with OIDC or SAML.

SCIM allows:

• Automatic creation of EyeQuestion user accounts

• Updating user information from your IdP

• Automatic deactivation when users leave the organisation

This reduces manual user management and ensures EyeQuestion stays aligned with your IT user directory.

How to enable SSO in EyeQuestion