Skip to main content
Delphina’s SSO is powered by WorkOS, so we can support any identity provider that WorkOS supports — including any SAML or OIDC provider. See the WorkOS list of supported identity providers for the full set. Google Workspace SSO is enabled by default for every organization — no setup required. To use a different provider, your IdP admin completes the short exchange below and the Delphina team enables it for your organization. The two most common providers we configure are documented here: Using a different provider? The flow is the same — your IdP admin creates an OIDC (or SAML) integration, adds the connection-specific callback URI Delphina provides, and sends back the connection details. Contact the Delphina team and we’ll set it up.

​
How it works

  1. Delphina creates a connection for your organization and sends you a connection-specific callback URI, in the form: 
    https://auth.workos.com/sso/oidc/<your-connection-id>/callback
  2. Your IdP admin configures the integration and returns the connection details (client ID, client secret, and provider domain or discovery endpoint).
  3. Delphina wires up the connection and enables it for your organization.
  4. Users sign in by entering their email and choosing your provider.

​
Required claims

Whatever the provider, the ID token must include sub, email, given_name, and family_name. Confirm test users have first and last names populated in their directory profiles, or those claims will be empty and sign-in will fail.

​
Provisioning

Users are auto-provisioned on first successful login (JIT) with a default role, which an org admin can adjust afterward. See User Management & Roles.