Skip to main content
anny supports company logins via OpenID Connect (OIDC). Any identity provider that offers OpenID Connect Discovery works, for example Entra ID, Okta, Keycloak, Auth0, or Authentik. You only provide the address of your identity provider and the credentials of the application. anny reads all other endpoints automatically, even if your identity provider changes them later.
Setting this up yourself in the admin area is not possible yet. Write to us at support@anny.co and we create the connection for you.
If your identity provider supports SAML 2.0, we recommend that path, as more features such as SCIM and federated logins are available. You find a guide under Generic SAML 2.0 SSO.

​
What we need from you

Create a new application in your identity provider, sometimes also called “client” or “app”. It has to be confidential, meaning it works with a client secret. Then send us these three values:

​
What you get from us

Once the connection exists, we come back to you with:
  • the callback URL that you add to your identity provider as an allowed redirect URL;
  • a post-logout URL, in case your users should also be signed out of your identity provider when they log out.
As long as the callback URL is not stored in your identity provider, the login fails with an error such as “redirect_uri mismatch”.

​
Requirements for your identity provider

anny requests the scopes openid profile email and expects these claims:

SSO overview

Which login methods anny supports and when each one fits.

Attribute mapping

Automatically assign users to communities based on what your identity provider sends.