Bonnard

Customers

Identity providers

Updated

Connect the identity provider a customer runs, so its people sign in with their work accounts. You need the Admin role in your workspace.

Providers

The console at app.bonnard.ai offers these providers:

  • Microsoft Entra ID
  • Okta
  • Auth0
  • WorkOS
  • Google Workspace
  • Generic OIDC

Sign-in methods

An identity provider connection holds these methods on its Overview tab:

Sign-in methods on a connection
MethodWhat it does
Customer SSO loginCustomers sign in with their identity provider account
Trusted issuerBonnard accepts access tokens from the identity provider
Email code fallbackCustomers with no SSO or Trusted issuer sign in with an emailed code

Set one up

  1. In the console, select Settings, then Identity.
  2. Select Connect a provider. If a connection exists, open Manage connections and select + Add connection.
  3. Select the provider.
  4. Enter the Connection name and the values the form asks for.
  5. Select Create connection.
  6. On the Overview tab, set each sign-in method you want to on. Where a row shows Set up, select it and save its values first.

Get in touch for help with any of these providers or Trusted issuer.

The Connection tab

The Connection tab holds the API key that the directory uses and the Delete button. Deleting a connection ends access for customers who sign in through it. Their customer records stay.

Synced organisations

A synced organisation becomes a customer in Bonnard, and its users stay current. It has no tenant (the value that marks its data in your database, set as its Tenant ID) and no access grant until you add them.

  1. Open the connection’s Directory tab.
  2. Select Manage organizations, or Add organizations if none sync.
  3. Select Refresh. If it asks for the provider’s API key, enter it and select Verify & continue.
  4. Select each organisation to sync.
  5. Select Save changes.

To stop, clear the organisation, select Save changes, then select Stop syncing. Bonnard ends that customer’s access, sessions, and API keys, and archives the customer. You can select the organisation again later to restore sync.

Who does what

An Admin in your workspace connects the provider, and the customer’s people sign in with it. See Get customers signed in for their steps.