What is SSO and why should you use it?


Single Sign-On (SSO) is an authentication mechanism that allows users to access multiple independent applications and systems using the same central set of login credentials (e.g., a corporate Microsoft Azure AD, Google Workspace, or Okta account).

Implementing SSO in our service brings three key benefits:

  • Convenience for users: Your team members do not have to create or remember another password for a new system. Logging in is instantaneous, often requiring just a single click.

  • Increased security: The risk of using weak or repetitive passwords is reduced. The entire authentication process takes place fully on the side of your trusted identity provider.

  • Easier management (IT): Administrators in your company can conveniently manage employee access from one place (e.g., automatically revoke access to all tools, including Startquestion.com, when an employee leaves the company).

OIDC integration on the Startquestion.com platform

We base the authorization integration in our service on the modern and secure OIDC (OpenID Connect) standard. The implementation process requires close cooperation with your IT department or identity system administrator.

Below you will find step-by-step information on how to set up this connection.

Data required to set up the connection

To start the configuration on the Startquestion.com side, we need your company to generate and provide three key parameters from the Identity Provider:

  • Discovery endpoint (URL address containing the .well-known configuration)

  • Client ID 

  • Client Secret

Step-by-step configuration process


Step 1: Secure data transfer


Send the collected configuration data to our support team at contact@startquestion.com.

Important (Security rules): In order to maintain the highest protection standards, we ask for appropriate securing of all data before sending. Do not send parameters (especially Client Secret) in plain text in an e-mail. Use secure transfer channels, such as one-time, encrypted links (e.g., One-Time Secret, Bitwarden Send, a corporate password manager) or send the data in a password-protected ZIP archive (providing the password via a separate channel).


Step 2: Receiving the Redirect URI and login link


After processing your request, the Startquestion team will generate and send you two key pieces of information in a return message:

  1. Redirect address (Redirect URI) – pass it to the person responsible for administering the SSO system in your company, it will be necessary to finalize the configuration on your side.

  2. Dedicated SSO login link – a unique address through which your team will access the platform.

Step 3: Test login


Once the settings on both sides (Startquestion.com and your identity provider) are introduced, the previously received dedicated link should be used to conduct a test. Verification is carried out on a selected user from your plan to ensure that data mapping and authorization proceed smoothly.

Step 4: Providing access to the team

After successful completion of the test login, the integration process is finalized. From this moment, you can securely share the dedicated link with your team, allowing them to log in to our platform with one click using their corporate credentials.