A directory and single sign-on for your people.
EZGH SSO gives your organization a directory of its people and an identity provider for your own apps and EZGH apps. People sign in once at your portal and reach everything you assign them.
At a glance
- Portal
- <alias>.sso.ezgh.app
- Protocols
- OIDC, SAML 2.0 and SCIM
- Users
- 5,000 per organization (adjustable)
What you get
Passkeys first
Hosted users sign in with a passkey, or a password and a TOTP code.
Bring your identity provider
Route email domains to Okta, Microsoft Entra ID or Google Workspace, over OIDC or SAML 2.0.
OIDC and SAML apps
Your applications trust only EZGH SSO, however a person signed in. Push assignments to apps with SCIM.
Console access
Directory users can use the console and the CLI as a bot you map to them, with keys that end with their session.
Pricing
All pricing| Directory, sign-in and apps | Free |
Built on the platform
Governed like every other product, from the first call.
More in security and identity
Secrets
Versioned credentials and configuration
EZGH Secrets stores sensitive values, such as database passwords, API keys, certificates and the contents of a .env file, as named fields in immutable versions.
IAM
Users, groups, bots, policies and API keys
IAM decides what each person and program in your organization can do, with policy documents attached to users, groups and bots. There are no roles to untangle.