Single Sign-On Overview

Single Sign-On (SSO) lets your organization's users sign in to Ververica Cloud using your own identity provider (IdP), such as Okta, Azure AD, or Google Workspace, instead of a separate Ververica password. Once your IdP authenticates a user, that user gets access to Ververica Cloud without entering any additional credentials.

SSO requires an organization. An organization replaces an individual account for a company: it centralizes access management, billing, and payments, and connects your team's access to your own IdP.

If you're not part of an organization, you keep signing in with your Ververica Cloud username and password, the same as today. Once your account belongs to an organization, your account settings reflect that: a Team member's profile shows "Managed by <your organization's domain>".

Benefits

• Authentication through your identity provider, using OIDC or SAML 2.0.
• Fine-grained authorization and access permissions.
• Centralized administration across workspaces, instead of managing access per workspace, isolating high-level organization administration from workspace-level administration.
• Organization administration grouped into specific tasks: Organization Administration, User Administration, Workspace Administration, and Billing Administration.

In This Section

• Creating an Organization and Configuring SSO: convert your individual account into an organization and configure your identity provider.
• Managing Access: control access using Organization Teams and Teams.
• Authentication with SSO: sign in with SSO and access resources according to your permissions.
• API Authentication: authenticate automation accounts and scripts that call the Ververica API.
• Single Sign-On (SSO) Reference: look up definitions for terms like identity provider, SSO Group, and Organization Team.
• Audit Log Encryption Keys: protect the request and response content in your audit events with an encryption key.