Create an SSO integration

Last update:
Aug 21, 2026
To create an SSO integration:
  1. Sign in to the Aikyam Identity Console.
  2. In the left navigation pane, select Applications. Alternatively, you can select View Applications tile on the Dashboard.
  3. Select the application you want to configure.
  4. Navigate to the Single sign-on tile and click View & Update to open the side pane.
  5. Click Create integration which opens a dialog box with two options:
    • SSO Inbound: Users log in to your application via an external identity provider and are then redirected to your application, or
    • SSO Outbound: Users log in to your application via tenant ID and are then redirected to an external application.
      Select the correct type based on whether your application is the target (Inbound) or the source (Outbound) of authentication.
  6. SSO inbound configuration
    If you select SSO Inbound, configure the following required fields:
    1. Identifier (Required): A unique identifier for integration. You can enter a custom value or click Auto generate.
    2. Inbound assertion type (Required): Select the format for the authentication assertion: JWT, OPEN_TOKEN, or HSID_TOKEN.
    3. Tenant Integration (Required):
      • In OHID applications, if you select JWT as the assertion type: The tenant integration field displays only specific integration, such as One Healthcare ID JWT SSO Integration.
      • In HSID applications, if you select JWT as the assertion type, the tenant integration field displays only specific integration, such as Internal SSO Integration.
      • If you select OPEN_TOKEN as the assertion type: The Tenant integration field displays a broader range of options. Multiple integrations supporting OpenToken assertions are available for selection, which supports varied external identity providers and federated authentication scenarios.
      • In HSID applications, if you select HSID_TOKEN as the assertion type: The Inbound assertion type field displays two assertion types: Standard SSO and Trusted SSO
    4. Multi-factor Authentication (MFA) type (Required): Select the type of multi-factor authentication you want to enable: Adaptive authentication, Multi-factor authentication, or Bypass multi-factor authentication
    5. SSO start URL (Required): The URL where authentication begins.
    6. Click Save.
    SSO outbound configuration
    If you select SSO outbound, configure the following required fields:
    1. Identifier (Required): A unique identifier for integration. You can enter a custom value or click Auto generate.
    2. Inbound assertion type (Required): Select JWT as the format for the authentication assertion.
    3. Outbound assertion type (Required): Select OPEN_TOKEN as the outbound authentication assertion. This ensures that the data is securely encapsulated in an encrypted key-value format.
    4. Tenant integration: Select the appropriate tenant.
    5. Custom attributes: Refers to the optional key-value pairs included in the SSO assertion to transmit additional user-specific data to the target application.
    6. Redirect URL: Enter the URL where the external application expects the authentication response.
    7. Partner name: Enter the identifier for the external partner application as registered in PingFederate.
    8. Click Save.

On this page

Powered by Aikyam @2025 All rights reserved

Solutions

B2B Solution
B2C Solution
Admin Solution

Developer

Explore
Integrate
Scale

Resources

Documentation

Support

Partner Support
+1 866 451 2735
hsid_support@aikyam.com

Member Support
+1 855 819 5909
optumsupport@optum.com