{"id":13080,"date":"2025-04-16T21:07:30","date_gmt":"2025-04-16T21:07:30","guid":{"rendered":"https:\/\/www.k12insight.com\/kc\/?p=13080"},"modified":"2025-10-27T19:44:47","modified_gmt":"2025-10-27T19:44:47","slug":"streamlining-access-with-single-sign-on-for-onflo","status":"publish","type":"post","link":"https:\/\/www.k12insight.com\/kc\/getting-started\/streamlining-access-with-single-sign-on-for-onflo\/","title":{"rendered":"Streamlining Access with Single Sign-On for Onflo"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Take your Onflo (formerly Let's Talk!) user experience to a new level with single sign-on (SSO). Setting up SSO for Let\u2019s Talk allows users to access the platform using only one set of credentials.<\/span><\/p>

Better user experience<\/b>\u00a0<\/span><\/h4>

Grant quick and easy access to Onflo and other district applications to improve the user experience for your staff.<\/span><\/p>

Enhanced security\u00a0<\/b><\/h4>

Eliminate the need for applications to store copies of user credentials in their own databases to make the user experience more secure while decreasing risk for data breaches and costly cyber attacks.<\/span><\/p>

User provisioning<\/b>\u00a0<\/span><\/h4>

Boost productivity and save time by making it easy to create user accounts as needed.\u00a0<\/span><\/p>

How to Implement<\/b><\/h2>

SAML SSO<\/b><\/h4>

Using SSO, a user can log in once and gain access to different applications, without the need to re-enter log-in credentials at each application. Security Assertion Markup Language (SAML) is a standard protocol for web browser Single Sign-On (SSO) using secure tokens.<\/span><\/p>

Onflo supports all <\/span>IdP initiated SAML SSO<\/b>.<\/span><\/p>

The team will need the following information from the client to set up SSO.<\/span><\/p>

  1. Metadata of IdP<\/span><\/li>
  2. Certificate for establishing SSO<\/span><\/li><\/ol>

    After receiving the information above, the team will share our metadata and certificate that the client needs to set up in their AD.<\/span><\/p>

    Using any AD\/LDAP<\/b><\/h4>

    Onflo platform supports SSO through various Active Directory systems. For an Active Directory (AD) or <\/span>Lightweight Directory Access Protocol<\/span> (LDAP) integration, the client needs to provide the following information:<\/span><\/p>

    1. AD URL<\/span><\/li>
    2. AD user id: A test user needs to be created in the AD that the Onflo system can use to authenticate<\/span><\/li>
    3. AD password: Password of the test user that is created in the AD<\/span><\/li><\/ol>

      Additionally, in the client's AD directory there should be a separate field or a group with the name <\/span>AllowLT<\/i><\/b>. All users with AllowLT field value of \u2018Yes\u2019 will be allowed to log into Onflo Platform and vice versa.<\/span><\/p>

      Google-based SSO<\/b><\/h4>

      Onflo currently offers fully functional Google based SSO.<\/span><\/p>

      If clients with Gmail-based email addresses are also registered as Onflo users through the same Gmail email address, then Google-based SSO will automatically work for them.<\/span><\/p>

      Users who have already logged into their Google account do not need to authenticate again when logging into Onflo. They can simply click a button on the page below and log into their account.<\/span><\/p>

      https:\/\/k12insight.com\/SSO.aspx<\/span><\/a><\/p>

      Are you ready to set up Single Sign-on? <\/span>Click here<\/span><\/a> to complete this brief intake survey and a member of our implementation team will be in touch with next steps. <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

      Take your Onflo (formerly Let's Talk!) user experience to a new level with single sign-on (SSO). Setting up SSO for Let\u2019s Talk allows users to access the platform using only one set of credentials. Better user experience Grant quick and easy access to Onflo and other district applications to improve the user experience for your...<\/p>\n","protected":false},"author":27,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_kad_post_transparent":"default","_kad_post_title":"default","_kad_post_layout":"default","_kad_post_sidebar_id":"","_kad_post_content_style":"default","_kad_post_vertical_padding":"default","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"footnotes":""},"categories":[451],"class_list":["post-13080","post","type-post","status-publish","format-standard","hentry","category-getting-started"],"_links":{"self":[{"href":"https:\/\/www.k12insight.com\/kc\/wp-json\/wp\/v2\/posts\/13080","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.k12insight.com\/kc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.k12insight.com\/kc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.k12insight.com\/kc\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/www.k12insight.com\/kc\/wp-json\/wp\/v2\/comments?post=13080"}],"version-history":[{"count":11,"href":"https:\/\/www.k12insight.com\/kc\/wp-json\/wp\/v2\/posts\/13080\/revisions"}],"predecessor-version":[{"id":14871,"href":"https:\/\/www.k12insight.com\/kc\/wp-json\/wp\/v2\/posts\/13080\/revisions\/14871"}],"wp:attachment":[{"href":"https:\/\/www.k12insight.com\/kc\/wp-json\/wp\/v2\/media?parent=13080"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.k12insight.com\/kc\/wp-json\/wp\/v2\/categories?post=13080"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}