Authentication Methods (SSO, Magic Link)
KeyRunner supports two secure methods of authentication tailored to enterprise use cases: SSO (Single Sign-On) and Magic Link login.
🔐 SSO (Single Sign-On)
SSO is available for enterprise customers who want centralized authentication using their existing Identity Provider (IdP).
- KeyRunner acts as a Service Provider (SP)
- Customer's IdP acts as the Identity Provider (IdP)
- Supports SAML and OIDC protocols
- Enables seamless login, centralized user management, and audit compliance
- Role-based access can be mapped directly from IdP attributes
✅ Compatible with providers like Okta, Azure AD, Auth0, Google Workspace (OIDC), and more.
✉️ Magic Link Authentication
Magic Link is an alternative to SSO for customers who are piloting the enterprise version without full IdP integration.
- Passwordless login via secure, time-limited email links
- Ideal for evaluations, POCs, and temporary workspace access
- Scoped to user, workspace, and role
⚠️ Not intended for long-term or production-grade access. We recommend migrating to SSO for scale and security.
🚫 What We Don't Support
To maintain security standards:
- ❌ No social login (e.g., Google, GitHub, Facebook)
- ❌ No username/password login for enterprise accounts
This ensures compliance with zero-trust principles, avoids shared credentials, and maintains a clean audit trail for every session.
Need help configuring SSO for your org or rolling out Magic Link access for pilots? Reach out to us — we’re happy to guide your team through setup.