Single Sign-On

Strise supports Single Sign-On (SSO) via Auth0, enabling your team to log in with their existing corporate credentials.

Strise uses email-based redirection to determine how each user should authenticate:

Users whose email domain is configured for SSO are automatically redirected to their identity provider.
The login page also displays Microsoft and Google buttons that use the OIDC (OpenID Connect) protocol for authentication.

The user enters their email address on the Strise login page.
Strise checks whether the email domain has an SSO connection configured.
If SSO is configured, the user is redirected to their identity provider (e.g., Microsoft Entra ID).
After successful authentication, the user is redirected back to Strise with an active session.

SSO Login Flow

API Authentication

For API access, Strise uses JWT (JSON Web Tokens). After authenticating via SSO, a JWT is issued that can be used for subsequent API requests.

Directory Synchronization

Directory synchronization (e.g., SCIM provisioning) is not supported. User management must be done manually through the Strise admin panel. Administrators can invite, deactivate, and manage user roles directly within Strise.

SSO Options

Microsoft

Strise supports Microsoft SSO via the Microsoft button on the login page. This is powered by an Auth0 Entra Enterprise Connection configured for multi-tenant access using the OIDC protocol.

This means any organization using Microsoft Entra ID (formerly Azure AD) can authenticate their users through Strise without additional per-tenant configuration.

Setup

To configure SSO for your organization, contact the Strise team at support@strise.ai. The team will work with your IT administrators to set up the appropriate identity provider connection.