Back to Documentation
Authentication and SSO
Configure identity providers, SSO flows, and role-based access control for secure, compliant access.
SSO Setup
- Register your SecurePoint callback URL in the identity provider.
- Configure required claims (email and organization context fields).
- Map IdP groups to SecurePoint roles before broad rollout.
- Test both initial sign-in and forced re-authentication scenarios.
Callback URL
https://www.securepointusa.com/auth/callbackRole-Based Access
| Role | Typical Scope |
|---|---|
| org_admin | Organization configuration, users, and policy controls. |
| site_manager | Site configuration, host coordination, and local operations. |
| compliance_manager | Case review, adjudication, and evidence workflows. |
| front_desk | Lobby operations, check-in support, and visitor workflow assistance. |
| auditor_readonly | Read-only audit and evidence review. |
Keep role grants minimal and add elevated roles only where workflow ownership requires it.
Session Security
Validate session timeouts and re-authentication behavior for sensitive actions. Compliance and organization-admin workflows should be tested with MFA enabled where policy requires it.
Example Claims Payload
{
"sub": "user-uuid",
"email": "jane@example.com",
"organization_id": "org-uuid",
"role": "org_admin"
}Never store service-role credentials in browser code. Keep privileged secrets on server-side routes only.
Need implementation support?
Our team can provide a guided SSO rollout and RBAC workshop tailored to your environment.
Contact the team