Overview

Single Sign-On enables you to replace Featurebase’s authentication system with your own app's login system, automatically authenticating users coming from your app so they don’t have to log in.

Users will also be able to log in using their existing account with your app, so they don’t have to worry about creating yet another account for Featurebase.

Benefits:

• Seamless authentication and user experience for login

• Restrict access across Featurebase to segments (e.g. paying customers, beta testers, etc.)

• Sync user data to create segments, restrict their access, and better prioritize feedback

• Works with widgets and the public portal for authentication

Setting up SSO for the web portal

This process involves setting up a dedicated page on your website to handle SSO authentication, creating and managing JWT tokens, and finally authenticating your users with Featurebase.

Here's a summary of the authentication flow:

• Your user wishes to authenticate and clicks on the Login with YourCompany account button on your feedback board.

• We redirect them to your website’s custom login page and append the return_to parameter to the URL.
  https://yourwebsite.com/sso/featurebase?return_to=https://yourorg.featurebase.app/roadmap

• Your authentication system logs the user into your website and creates a JWT token.

• You return the user back to Featurebase with the generated token and the original return_to parameter passed along.
  https://yourorg.featurebase.app/api/v1/auth/access/jwt?jwt=payload&return_to=theReturnToParamYouCanGetFromStep2

• Featurebase logs the user in and automatically returns them back to where they started the authentication process.

1. Set up a dedicated SSO page

Set up a page on your website that will authenticate the user on your end (e.g https://yourdomain.com/sso/featurebase)

Next, navigate to your Featurebase Dashboard → Settings → Security, and enter the URL of the page you created in the SSO URL field. This is where Featurebase will redirect users who wish to log in through your app's account.

2. User authentication and JWT token creation

When a user arrives on your SSO page, authenticate them using your app's authentication system and create a JWT Token for them by following this guide.

3. Return the user back to Featurebase

Redirect the user to the Featurebase JWT endpoint with the JWT and return_to URL.
https://yourorg.featurebase.app/api/v1/auth/access/jwt?jwt=payload&return_to=https://yourorg.featurebase.app/roadmap

If you run into any issues or have questions, please reach out to our support.

Admin SSO

You can also authenticate admins by including the "type": "admin" param in the JWT for admin accounts.

For it to work, any user who has this parameter set will also be automatically added to your organization.

FAQ