Webex OAuth SSO: Secure Single Sign-On with Flexopus
The Webex OAuth SSO integration connects Flexopus with the Cisco Webex single sign-on service, based on the OAuth 2.0 protocol. This allows employees to log in to Flexopus directly using their existing Webex account, without needing an additional password.
What is the Webex OAuth SSO integration?
Upon the first login, a Flexopus user profile is automatically created, pulling the name and email address from the Webex account. The Webex account profile picture is also synchronized, ensuring the user profile in Flexopus is populated immediately.
Access can be restricted using a domain whitelist: only users with email addresses from approved company domains are granted access to Flexopus. This gives administrators full control over who is permitted to log in.
What is the purpose of the integration?
The integration simplifies access to Flexopus for all employees who already use Webex. Instead of managing separate credentials, they simply use their familiar Webex login—fast, secure, and without extra effort.
Typical use cases for the integration:
- Employees log in to Flexopus with one click—no separate password required.
- New users are automatically created in Flexopus upon their first login, including their profile picture.
- Administrators define which email domains are granted access—all others are automatically rejected.
- Once set up, alternative login methods (e.g., password login) can be disabled to manage access exclusively via Webex SSO.
How easy is the integration?
Setting up the Webex OAuth SSO integration is straightforward and requires no technical expertise. In the Flexopus settings under "Authentication," Webex SSO is added as a new provider, the desired domains are entered—and the integration is active.
A complete step-by-step guide for setup can be found in our Help Center.
What are the benefits of the integration?
- Simple login: Employees use their existing Webex account—no additional password needed.
- Automatic user creation: Profiles are created automatically upon the first login, including name, email, and profile picture.
- Access control via domain whitelist: Only users from approved domains can log in.
- Two-factor authentication support: 2FA settings from the Webex account are automatically applied.
- Included for free: The integration is available in Flexopus at no extra cost.
- Reduced administrative effort: No manual maintenance of separate credentials in Flexopus.
- Fast setup: Configuration is completed in just a few steps.
Categories
Developed By
Flexopus GmbHFurther integrations
.svg)
Questions and answers
What happens when an employee leaves the company?
If a user's Webex account is deactivated or deleted, logging into Flexopus via Webex SSO is no longer possible. The Flexopus account remains active initially and must be deactivated or deleted separately within Flexopus. For fully automated user management, we recommend additionally using a SCIM interface.
What data is transmitted during login?
When logging in via Webex OAuth SSO, only the necessary basic data is transferred: name, email address, and—if available—the profile picture. No additional personal data from the Webex account is shared with Flexopus.
Can I restrict access to specific user groups?
Yes. Using the domain whitelist, administrators define which email domains are authorized to log in. Additionally, you can enable an option that only allows users who have already been manually created in Flexopus to log in. This ensures you maintain full control over access.
Is Webex OAuth SSO the recommended SSO variant?
The Webex OAuth SSO integration is a simple and quick-to-implement solution. For companies requiring tighter control over the user base, Flexopus generally recommends connecting via SAML2. With SAML2, only users from your own identity provider can gain access. Please contact us if you are unsure which variant best suits your IT infrastructure.
What happens if someone tries to log in with an unauthorized domain?
Users whose email address does not belong to the configured domain whitelist are denied access to Flexopus. The login attempt is automatically rejected. This ensures that only company employees are granted access.