Single Sign-On (SSO)

Health Gorilla supports SSO so your organization's users sign in with your identity provider. SSO is configured for each tenant separately, using either OpenID Connect (OIDC) or Security Assertion Markup Language 2.0 (SAML2). An organization with more than one Health Gorilla tenant, or with sub-tenants, configures SSO for each. Health Gorilla doesn't offer automatic provisioning; instead each user account exists in both Health Gorilla and your identity provider, and every account uses the employee's work email address. A user without a matching account can't sign in, and Health Gorilla doesn't create one automatically.

Choosing a Protocol

Configure SSO with the protocol your identity provider supports:

OpenID Connect (OIDC)
Security Assertion Markup Language 2.0 (SAML2)

What Your Organization Provides

Share these details with your Health Gorilla implementation contact, who configures SSO for your tenant.

For an OIDC configuration, provide the following from your identity provider:

Client ID: A unique identifier from your identity provider.
Client Secret: A secure key from your identity provider.
OIDC Discovery URL: Your provider's endpoint for configuration data.
Client scopes: Optional. Leave blank unless your identity provider requires specific scopes.

For a SAML2 configuration, provide:

Identity provider metadata: A URL to your identity provider's SAML metadata.

What Health Gorilla Returns

Once the configuration is saved, Health Gorilla generates values for you to register with your identity provider:

Callback URL: The redirect URL for authentication, for both OIDC and SAML2. Your identity provider may label this the redirect URI for OIDC, or the Assertion Consumer Service (ACS) URL for SAML2.
Entity ID: A unique identifier for the configuration, for SAML2. Your identity provider may label this field SP Entity ID or Issuer.

Share these with your identity provider to complete the connection.

For the SSO used to embed the Patient Chart Viewer in your application, go to Embedded iFrame.