Single Sign On (SSO)

With the Foxpass SSO Add-on, your already authenticated users with Foxpass can now log in to different service providers via Web or Terminal, saving them time and context switching. Or vice versa i.e. you can also configure an external Identity provider to log in to your Foxpass account. This Add-on is currently in beta mode and free to test by everyone. In the near future, this Add-on will become a paid Add-on.

SSO to other Service Providers

Foxpass users can log in to different service Providers either via Foxpass Console (web) or via Foxpass SSO command-line utility (terminal). We currently support the following service providers and are quickly adding support for more.

Configuration
If you are an Administrator of your Foxpass account, you can configure SSO for your account by going to the SSO Service Providers settings page. You can enable and disable different service providers per your needs. Refer to the following links for further help:

1. Configure SSO to AWS
2. Configure SSO to Google Workspace
3. Configure SSO to Github

SSO Web Login
Users can log in to different configured service providers such as the AWS console by going to the Foxpass Console's Foxpass SSO page.

SSO Terminal Login / utility
Users can use the Foxpass SSO command-line utility to log in / get temporary tokens from their configured service providers such as obtaining temporary AWS credentials. Copy your SSO API key from the Foxpass Console's Service Provider page and then install the Command line utility via the command shown below.

curl https://foxpass-sso.s3.amazonaws.com/1.0/install.sh --output install.sh && sudo bash install.sh <SSO_API_KEY>

SSO IDP / Login to Foxpass through an external IDP

You can also configure an external Identity Provider (IDP) such as Okta or OneLogin to log in to your Foxpass Console account.

Configuration
If you are an Administrator of your Foxpass account, you can configure SSO IDP for your account by going to the SSO Identity Providers settings page. You can Add, enable and disable different Identity providers for your account per your needs.

• Entity ID is usually provided by your IDP
• Reply URL is https://console.foxpass.com/login_idp// (e.g. https://console.foxpass.com/login_idp/company.com/)

For Okta, we are available in their catalog. Please see:

• Configure Okta as IDP

Do not hesitate to reach out to us if you have any feedback or issues.