Webex OAuth SSO: Secure single sign-on with Flexopus
The Webex OAuth SSO integration connects Flexopus with Cisco Webex's Single Sign-On service – based on the OAuth 2.0 protocol. This allows employees to log in to Flexopus directly with their existing Webex account, without needing an additional password.
What is Webex OAuth SSO integration?
Upon first registration, a Flexopus user profile is automatically created, which uses the name and email address from the Webex account. Additionally, the profile picture of the Webex account is synchronized, so the user profile in Flexopus is automatically populated.
Access can be specifically restricted via a domain whitelist: Only users with email addresses from approved company domains are granted access to Flexopus. This gives administrators full control over who is allowed to log in.
What is the purpose of integration?
The integration simplifies access to Flexopus for all employees who already work with Webex. Instead of managing separate login details, they simply use their familiar Webex login – quickly, securely and without any additional effort.
Typical use cases for integration:
- Employees can log in to Flexopus with a single click – without a separate password.
- New users are automatically created in Flexopus upon their first login, including a profile picture.
- Administrators determine which email domains are granted access – all others are automatically rejected.
- After setup, alternative login methods (e.g. Password login) will be disabled to fully control access via Webex SSO.
How easy is the integration?
Setting up the Webex OAuth SSO integration is straightforward and requires no technical expertise. In the Flexopus settings under "Authentication", Webex SSO is added as a new provider, the desired domains are entered – and the integration is active.
For complete step-by-step setup instructions, please visit our Help Center.
What are the advantages of integration?
- Easy registration: Employees use their existing Webex account – no additional password is required.
- Automatic user creation: Upon first login, the profile is automatically created, including name, email address and profile picture.
- Access control via domain whitelist: Only users from approved domains can log in.
- Two-factor authentication support: The 2FA settings from the Webex account are automatically applied.
- Included free of charge: Integration is available in Flexopus at no extra cost.
- Reduced administrative effort: No manual maintenance of separate access data in Flexopus.
- Quick setup: Configuration is completed in just a few steps.
Categories
Developed By
Flexopus GmbHFurther integrations
.svg)
questions and answers
What happens when an employee leaves the company?
If a user's Webex account is deactivated or deleted, it will no longer be possible to log in to Flexopus via Webex SSO. The Flexopus account will initially remain active and must be deactivated or deleted separately within Flexopus. For fully automated user management, we also recommend using a SCIM interface.
What data is transferred during registration?
When logging in via Webex OAuth SSO, only the necessary basic data is transmitted: name, email address and – if available – profile picture. No additional personal data from the Webex account will be shared with Flexopus.
Can I restrict access to specific user groups?
Yes. Administrators use the domain whitelist to determine which email domains are authorized to register. Additionally, the option can be activated that only users who have already been manually created in Flexopus can log in. This way you retain full control over access.
Is Webex OAuth SSO the recommended SSO option?
Webex OAuth SSO integration is a simple and quick solution to set up. For companies that require closer control over the user base, Flexopus generally recommends connecting via SAML2. With SAML2, only users from the same Identity Provider can gain access. Please contact us if you are unsure which option is better suited to your IT infrastructure.
What happens if someone tries to log in with an unauthorized domain?
Users whose email address is not on the configured domain whitelist will not have access to Flexopus. The login attempt will be automatically rejected. This ensures that only company employees have access.