Overview
Require visitor authentication before accessing a status dashboard.
Dashboard SSO requires visitors to sign in through your identity provider before viewing a status dashboard. Use it for internal pages that should not be publicly readable.
How it works
StatusDashboard supports per-dashboard Single Sign-On (SSO), allowing you to restrict access to a status dashboard so that only authenticated users from your identity provider can view it. This is useful for internal status dashboards — for example, an engineering dashboard that should only be visible to your team.
When enabled on a dashboard, unauthenticated visitors are redirected to your identity provider to sign in before they can view the page.
Each dashboard can have at most one SSO provider configured. When a visitor navigates to a protected dashboard:
- They are redirected to your identity provider to authenticate.
- After successful authentication, they are redirected back to the dashboard.
- The dashboard is displayed normally.
If authentication fails or the visitor cancels, they are returned to the sign-in page without access.
SSO can be enabled or disabled independently of whether a provider is configured. This lets you configure and test a provider before enforcing it for visitors.
Supported protocols
Configuration
SSO is configured per dashboard in the StatusDashboard admin console:
- Go to Dashboards and open the dashboard you want to protect.
- Select Single Sign-On.
- Choose your protocol (SAML or OIDC) and enter the provider details.
- Save the configuration, then use the toggle to enable SSO for visitors.
Enabling and disabling SSO
Saving a provider does not automatically protect the dashboard. SSO enforcement is controlled separately by a toggle. This means you can:
- Configure your identity provider without affecting current visitors.
- Test authentication before turning on enforcement.
- Temporarily disable SSO without losing your provider configuration.
When SSO is enabled, visitors must authenticate through your identity provider to view the status dashboard page. There is no per-user exception for the main page.
The embeddable widget does not participate in SSO. Its script and status API remain publicly accessible (subject to your IP allowlist if configured). Do not enable or embed the widget if you need all status data to stay behind SSO.
Subscriptions add a second layer on top of SSO. Dashboard SSO controls who may reach the status dashboard; visitors must still complete the normal channel verification flow to subscribe or manage notifications, even when IdP login is required.
Removing SSO
Deleting a provider removes the SSO configuration from the dashboard immediately. The dashboard reverts to being publicly accessible. This action cannot be undone — if you want to re-enable SSO later, you will need to re-enter your provider details.