Skip to main content

Login Providers

Users can log in to Studo Flow using their existing university credentials. This is done using one or multiple authentication/login providers. Studo Flow supports various Single-Sign-On / federation providers, and also offers an optional login UI.

What is a login provider?​

Login providers allow Studo Flow to connect to external authentication and authorization services and identity providers (IdP). You can use multiple login providers at the same time.

Session management​

When a user logs in via a login provider, a session is created in Studo Flow. The session is managed by Studo Flow and is valid until the user logs out or the session expires.

Some login providers support centralized logout (RP-initiated logout), which means that when a user logs out from Studo Flow, they are also logged out from the IdP. See SAML Single Logout and OIDC Backchannel logout for details. One side effect is that the "Logout" button in the Studo Flow UI will point directly to the IdP.

Alternatively, the IdP can invalidate the session, which will also invalidate the session in Studo Flow.

Limitations​

Currently, it's not possible to use the same login provider multiple times. So for example, it's possible to set up the OIDC and SAML login providers at the same time, but it's not possible to connect to two different OIDC identity providers at the same time.

Supported providers​