Single Sign-On (SSO) on BotCity Maestro allows users to access the platform using a single login, integrated with the organization's existing authentication systems. This simplifies access and reduces the need for multiple passwords.

Supported Identity Providers

BotCity supports integration with major corporate identity providers, including:

• Google Workspaces

• Microsoft Azure AD

• Microsoft Entra

• Okta, among others.

This is made possible through integration with Keycloak, an identity server compatible with OAuth2, SAML, and OpenID Connect.

How it works in practice

1. The user logs into the company’s authentication system (e.g., Google or Azure AD).

2. That system sends a secure authentication token to BotCity Maestro.

3. The user is then automatically authenticated on the platform without needing to re-enter credentials.

Real-world usage examples

• Once logged into a corporate email account, the user can automatically access BotCity Maestro.

• In enterprise environments, logging into a computer can also grant access to Slack, Zoom, and BotCity, all in an integrated way.

Benefits of SSO with BotCity

• Improved user experience: fewer passwords, less friction.

• Increased security: centralized authentication with support for MFA (multi-factor authentication) using apps like Google Authenticator or Microsoft Authenticator.

• Simplified user management: revoking access at the identity provider level also disables access to BotCity.

• IP-based access control: restrict platform access to specific IP addresses if needed.

Technical notes

• BotCity Maestro also supports local user accounts for companies not yet using identity federation.

• API authentication is handled via JWT tokens, with access validated through temporary sessions.

• Features such as SSO, MFA, and IP allow-listing are available upon request via support ticket.

If you have any questions or would like to enable these features, please contact BotCity Support.