B.01
After a single sign-in, all connected applications are available
SSO for external applications
We connect cloud (SaaS) and on-premises applications to your central sign-in in Zitadel. Your staff sign in once and can reach everything (single sign-on, SSO).
01
Your Benefits
B.02
When someone leaves, one click in the identity provider (IdP) blocks all their access immediately
B.03
Your security policies apply consistently to every application rather than being maintained app by app
B.04
Sign-ins are recorded centrally in an audit trail
02
Service scope
L.01
We register the application in Zitadel as an OIDC or SAML client
L.02
We map roles and groups from Zitadel into the application
L.03
Selected pilot users test the connection before it is rolled out to everyone
L.04
We document the configuration as a PDF
L.05
For SaaS applications, we set up the vendor side together with you
03
Requirements and exclusions
→ Prerequisites
- Zitadel is set up as the IdP (NDS-ID-ZITADEL)
- The application supports OIDC or SAML 2.0
- A maintenance contract, if you need a guaranteed response time
✗ Not included
- Applications without an SSO interface cannot be connected. We do not offer workarounds such as browser plugins
- Custom identity mapping with script logic is charged by the hour (NDS-OP-KON25)
- Automatic creation of users in the application (SCIM) is not standard and is assessed separately
- Migrating existing SSO integrations from Keycloak or Azure AD is a project
Does this fit your business?
In 30 minutes we work out whether this service suits you. Free and without obligation.