Single Sign-On (SSO) for Pix4D
Single Sign-On (SSO) allows access Pix4D software using your organization’s existing identity provider (IdP). This streamlines the login process, enhances security, and ensures that your team can access their tools without managing multiple sets of credentials.
IN THIS ARTICLE:
What is SSO?
Benefits of using SSO
Compatibility
How to Get SSO
What is SSO?
SSO is an authentication method that enables users to securely authenticate with multiple applications and websites by using just one set of credentials (such as an organizational email and password).
By integrating PIX4D products with a company’s identity management system, user access can be centralized, simplifying the onboarding and offboarding process.
Benefits of using SSO
-
Enhanced Security: Maintain strict control over password policies and multi-factor authentication (MFA) through your own provider.
-
Centralized User Management: Instantly revoke access for employees who leave the organization via your central dashboard.
-
Improved User Experience: Reduce "password fatigue" by allowing users to log in with familiar credentials they use daily.
-
Compliance: Helps meet IT audit requirements by providing a centralized log of user access and authentication events.
Compatibility
SSO is available for most modern PIX4D applications.
It is not available for PIX4Dmapper, PIX4Dfields, and PIX4Dreact, but we offer a workaround using the account page (which supports SSO).
Tip:
To ensure a smooth integration, it is recommended that the person managing the setup is familiar with OpenID Connect (OIDC). Configuration steps within the Identity Provider (IdP) dashboard—such as setting up Redirect URIs and managing Client Secrets—are required to successfully link the system with PIX4D.
Note:
Pix4D uses the email address to determine if an account should be routed through your Identity Provider (IdP). To ensure security and proper account mapping, please note:
-
Corporate Domains Only: SSO cannot be implemented for users with generic email addresses (e.g., @gmail.com, @outlook.com). All users must use a verified company email address.
-
Domain Whitelisting: During setup, a list of organizational domains must be provided. Once configured, all login attempts from these domains will be automatically redirected to the SSO portal.
-
Account Matching: If a user already has a Pix4D account under your company domain, it will be automatically linked to your IdP upon their first SSO login.
- Contractors: If contractors use company emails, those contractors will also require access to the company's IdP to log in.
Info:
It is important to distinguish between SSO Login and Organization Management:
-
SSO (Authentication): This only handles how a user logs in (verifying their identity via your IdP).
-
Organization Management (Authorization): Managing seats, assigning licenses, and defining user roles is still handled directly within the Organization's User access management.
SSO does not automate license provisioning or organizational hierarchy. Users must still be invited to a Pix4D Organization to be granted access to specific software seats.
How to Get SSO
SSO is an enterprise-grade feature designed to scale with your business. It is available via the following options:
-
Included in PIX4Dcloud Enterprise plan: If an active PIX4Dcloud Enterprise subscription is in place, SSO is included at no additional cost.
-
As a Paid Add-on: For other subscription tiers, SSO can be purchased as an annual add-on to your account.
Requesting Activation
To enable SSO for an organization, please contact the Sales team. Technical experts will guide the configuration process to ensure a seamless integration with the identity provider.