Skip to Content
Identity & accessSingle sign-on

Single sign-on

Every UI sign-in is routed through SSO before it reaches the application — a user authenticates against your identity provider first, and only then reaches the AlignAI front end (Vercel) and back end (Supabase). There is no separate AlignAI username/password path for UI login sitting alongside SSO.

AlignAI works with Okta and other SAML-based identity providers as a standard trusted-app integration. Your identity provider is the authentication gateway: it verifies the user, and AlignAI is the trusted application they’re redirected to once that verification is complete. This is a pass-through pattern — AlignAI doesn’t build custom integration work per identity provider.

SSO authentication flow — Okta (or any SAML IdP). A user signs in to the identity provider, Okta or other SAML 2.0 IdP, which redirects the verified user on to AlignAI, the trusted app, made up of a front end on Vercel and a back end on Supabase. A caption below the diagram reads: Okta authenticates the user directly. AlignAI is the trusted application the user is redirected to — a standard SSO pass-through pattern. There is no separate AlignAI username/password path alongside SSO.

Last updated on
OverviewProvisioning