General

What is a login provider?

Login providers allow Studo Flow to connect to external authentication and authorization services and identity providers (IdP). You can use multiple login providers at the same time.

Session management

When a user logs in via a login provider, a session is created in Studo Flow. The session is managed by Studo Flow and is valid until the user logs out or the session expires.

Some login providers support centralized logout (RP initiated logout), which means that when a user logs out from Studo Flow, they are also logged out from the IdP. See SAML Single Logout and OIDC Backchannel logout for details, one side effect is that the "Logout" button in the Studo Flow UI will point directly to the IdP.

Alternatively, the IdP can invalidate the session, which will also invalidate the session in Studo Flow.

Limitations

Currently, it's not possible to use the same login provider multiple times. So for example, it's possible to set up the OIDC and SAML login providers at the same time, but it's not possible to connect to two different OIDC identity providers at the same time.