BOOK A DEMO

Dashboard

Single Sign-On (SSO)

Let your team sign in to the Basta dashboard with your company's identity provider. Basta supports OIDC-based single sign-on, set up together with our team.

This page is about team SSO for the dashboard — how your staff sign in. To back your end-user bidders with an external identity provider, see Identity Providers instead.

How it works

Basta's dashboard SSO is built on OpenID Connect (OIDC). Once SSO is enabled for your company, sign-in is routed by email domain: when a team member enters a work email whose domain is configured for SSO, the dashboard hands off to your identity provider to authenticate, then returns them to Basta. There's no separate SSO URL to remember — everyone uses the normal login page.

Supported providers

SSO works with enterprise OIDC identity providers, with Microsoft Entra ID (Azure AD) as the primary enterprise integration today. If you use a different OIDC provider, get in touch and we'll confirm support.

SAML is not currently supported — SSO is OIDC only. Let us know at hi@basta.app if SAML is a requirement for your organisation.

Setting up SSO

Team SSO is configured together with Basta — there isn't a self-serve toggle in Settings yet. To get started, email hi@basta.app with:

  • The email domain(s) your team signs in with (for example yourcompany.com).
  • Your identity provider (for example Microsoft Entra ID).

From there the setup runs like this:

  1. We send you the redirect (callback) URL to register.
  2. You register an OIDC application in your identity provider and share its Client ID and Client Secret (plus your Tenant ID for Microsoft Entra ID).
  3. We map your users' email and name from the provider and wire up the domain-based routing.
  4. We test sign-in with you, then switch it on.

Adding or changing a provider or domain is done by Basta, so reach out whenever your identity setup changes.

Signing in with SSO

Once SSO is live for your domain, your team signs in like this:

  1. Go to dashboard.basta.app.
  2. Enter your work email address.
  3. When your domain is recognized, a Single Sign-On dialog appears — click Continue to login.
  4. You're redirected to your identity provider to authenticate, and returned to the dashboard once you're signed in.

Related