Skip to main content
SSO lets users sign in to Launchpad through their organization’s identity provider instead of separate KODE Labs credentials. Launchpad supports OIDC and SAML, with pre-built integrations for several identity providers. You configure sign-in methods from Sign In Methods in the sidebar.

​
Benefits of Single Sign-On

SSO simplifies the sign-in experience by eliminating the need to manage separate credentials for each platform. Users authenticate once through their organization’s identity provider and gain access to Launchpad and other connected applications without repeated logins. This reduces password-related support requests and frees IT teams to focus on higher-priority work.
  • Centralized authentication through your existing identity provider
  • Reduced credential fatigue, as users rely on one set of credentials across platforms
  • Stronger security posture by enforcing your organization’s authentication policies
  • Simplified user management, with user provisioning and de-provisioning handled through your IdP
  • Fewer password-related support tickets for IT teams

​
Supported Sign-in Methods

Launchpad supports SSO through the following authentication protocols.
  • OpenID Connect (OIDC) — a modern authentication protocol commonly used for web and mobile applications.
  • Security Assertion Markup Language (SAML) — an XML-based protocol widely adopted for enterprise SSO across web applications.
KODE Labs has integrated with the following identity providers:
  • CyberArk
  • Azure Active Directory (Azure AD)
  • Okta
  • Auth0
  • JumpCloud
You can also configure a custom OIDC or SAML integration with any IdP that supports these protocols.

​
Configuration

Setting up SSO requires configuring a sign-in method in Launchpad and connecting the corresponding application in your identity provider. You complete both from a single form in Launchpad.
Before you begin, verify that you have an admin role in your Launchpad workspace and access to your identity provider’s configuration settings.
1

Open sign-in methods

In the Launchpad sidebar, click Sign In Methods, then click + Add Sign in Method. Select one of the pre-configured identity providers that uses OIDC, or choose a custom OIDC configuration if your provider is not listed.
2

Copy callback URL

Launchpad generates an Authentication Callback URL at the top of the form. Copy this value — you need to enter it in your IdP as the Redirect URL or Callback URL.
​
Field
The callback endpoint your IdP redirects users to after authentication. This value is auto-generated and read-only.
3

Name sign-in method

In the Sign In Method Name field, enter a unique name for this method. You can optionally upload an IdP picture.
The sign-in method name cannot be changed after you save it.
4

Set up app in IdP

Log in to your identity provider and create a new application for KODE Labs. Provide the Authentication Callback URL you copied from Launchpad. After configuring the application, your IdP provides the values needed for the next step.
5

Enter IdP details

Back in the Launchpad form, enter the following values from your IdP:
​
Field
The OpenID Connect discovery endpoint provided by your IdP (typically ending in /.well-known/openid-configuration).
​
Field
The unique identifier your IdP assigned to the KODE Labs application.
​
Field
The secret key your IdP generated for this application.
6

Configure email claim

Under Claim configuration for email, verify that the Email field is set to the claim your IdP uses for email addresses (defaults to email).
7

Save

Optionally check Set as default Sign In Method if you want this to be the primary sign-in option for your organization. Click Save.
Last modified on March 10, 2026