Skip to main content

Login Providers

Users can log in to Flow using their existing university credentials. This is done using one or multiple authentication/login providers. Flow supports various Single-Sign-On / federation providers, and also offers an optional login UI.

What is a login provider?​

Login providers allow Flow to connect to external authentication and authorisation services and identity providers (IdP). You can use multiple login providers at the same time.

Session management​

When a user logs in via a login provider, a session is created in Flow. The session is managed by Flow and is valid until the user logs out or the session expires.

Some login providers support centralised logout (RP-initiated logout), which means that when a user logs out from Flow, they are also logged out from the IdP. See SAML Single Logout and OIDC Backchannel logout for details. One side effect is that the "Logout" button in the Flow UI will point directly to the IdP.

Alternatively, the IdP can invalidate the session, which will also invalidate the session in Flow.

Limitations​

Currently, it's not possible to use the same login provider multiple times. So for example, it's possible to set up the OIDC and SAML login providers at the same time, but it's not possible to connect to two different OIDC identity providers at the same time.

Supported providers​