Single sign-on
Let staff sign in to EnaTTO with their institution account via SAML 2.0 or OpenID Connect, join as members automatically and link to their directory entry.
- EnaTTO app
This article was verified with an older release. Screen names or steps may differ in the current version.
With single sign-on (SSO), your institution's staff sign in to EnaTTO with their institution account instead of an EnaTTO password. On their first sign-in they join your organization as Member and are linked to their directory record.
Required role
- The connection is set up by ENA Innovation in the identity service, with details from your institution's IT team.
- Roles beyond Member are given afterwards under Users (Owner, Administrator).
What your IT team provides
- The identity provider: SAML 2.0 or OpenID Connect (for example Microsoft Entra ID, Google Workspace, Okta or your own ADFS).
- For SAML the metadata URL; for OpenID Connect the issuer, client ID and secret. ENA Innovation gives your IT team the return (ACS) address to register.
- The email domains of your institution (for example
university.example). - The identity provider must send the user's email attribute: EnaTTO matches people by it.
How it works
A user enters their institution email on the sign-in page and is sent to your institution's login.
On the first sign-in, a user with one of your domains joins your organization with the Member role.
EnaTTO links the account to the one directory person with the same email that has no account yet. The link is written to the audit log and User account shows Linked on the person.
Import your staff into the directory before you switch SSO on, so that these links are made. See Importing people and units.
Good to know
- SSO users have no EnaTTO password. Close an account at your identity provider, and remove the membership under Users.
- Company contacts, external experts and patent attorneys who are not in your identity provider keep signing in by invitation.
- Test with one account first: check the membership and role under Users and the Linked mark on the person.
Related articles
Can't find what you need?
Our support team can help, from setting up workflows to reports. Please include your organisation code.
Integrations
Services EnaTTO connects to - ENA Notify email, EPO OPS, ORCID, OpenAlex, Crossref, benchmarking and the AI gateway - and what each of them receives.
Audit log
The EnaTTO audit log records every change, confidential access, export, import and AI request in a signed chain. Search, filter, verify and export it.