Skip to content

Single Sign-On (SSO)

Single Sign-On lets your employees sign in to BongoShield using the work accounts they already have — no extra passwords to remember, and no separate list of credentials to manage.

Why use SSO

  • Smoother for employees. They sign in the same way they do for their other work apps.
  • Less for you to manage. No separate BongoShield passwords to issue or reset.
  • Email-first and automatic. Employees just type their work email, and BongoShield routes them to the right sign-in method.

What's supported

BongoShield supports Single Sign-On with:

  • :material-microsoft: Microsoft (Entra ID) — for organizations on Microsoft 365.
  • :material-google: Google Workspace — for organizations on Google.
  • :material-key-outline: Other identity providers that use the standard SAML or OIDC protocols.

If your organization uses a different provider that speaks SAML or OIDC, it can very likely be connected — talk to your BongoShield contact.

How connecting SSO works (the big picture)

Connecting SSO is a one-time setup, and the BongoShield team will guide you through it. At a high level:

  1. Register BongoShield with your identity provider (Microsoft, Google, or your SAML/OIDC provider) as a trusted application.
  2. Exchange configuration between your provider and BongoShield so the two can trust each other.
  3. Tell BongoShield which email domains belong to your organization (for example, yourcompany.co.tz), so employees are routed correctly when they sign in.
  4. Test with a pilot user, then roll out to everyone.

We'll do this with you

SSO setup involves your identity provider's admin console and some coordination. The BongoShield team runs through it with you step by step so it's connected cleanly and securely.

New employees, automatically

With SSO in place, employees can be recognised the first time they sign in — so new joiners can start using BongoShield without you adding them by hand. You stay in control of roles and departments.

What SSO does not change

  • Employees still answer the daily security question after signing in — SSO just handles the sign-in step.
  • You still manage roles and departments inside BongoShield. Your identity provider confirms who someone is; you decide what they can do.