Single sign-on (SSO) is an authentication method that enables users to sign in using the same credentials they use for their work account.
Supported SSO Protocol
SSO on ioTORQ EMIS is based on the OIDC protocol using OAuth 2.0.
Supported Identity Providers
Microsoft Entra ID (formerly Azure AD)
Any OIDC-compliant provider (e.g., Okta, PingIdentity, Keycloak)
Setup Overview
These are the common steps to be done when setting up single sign-on. The order of the steps depends on the identity provider you are using.
Request SSO enablement – Email [email protected], with the required details from your identity provider.
Add the ioTORQ EMIS application to your identity provider.
Choose your SSO policy – Optional or Mandatory.
Choose Your Setup Guide
Common Troubleshooting Scenarios
“<email> does not have an active account in ioTORQ EMIS.”
This happens when the user successfully authenticates through the login page of their employer's identity provider (e.g., the Microsoft Login page); however, they do not have an account in ioTORQ EMIS. To add the user in ioTORQ EMIS, contact your ioTORQ EMIS portal's administrator. Once the user is created, they will be able to access ioTORQ EMIS.
Frequently Asked Questions
Does ioTORQ EMIS support auto-provisioning and de-provisioning (SCIM)?
ioTORQ EMIS currently does not support auto-provisioning or de-provisioning.
Additional Support
If you have other questions and need additional support, email [email protected].