SSO between apps

NotionApps Roadmap
1

Hello
what would be nice would be to have an SSO system between apps on the same domain, when the User database is the same.
example : I create two apps on domain qwert.com, both have the same user database. Once I logged into one, I can navigate to the other without re-authenticating.
Thanks

2

Hey, @cie172! I will note this feature down but it’s not something that we may pick up right away as the immediate roadmap is already packed with page content, relations, full-width desktop apps, and some smaller features.

1 Like
3

This request is covered by a workaround, and it is on the roadmap as live.

Problem

Two apps on the same domain share one Users database. After a person signs in to the first app, they should open the second app without signing in again.

Why this is a workaround

Each app has its own sign-in. Sharing a Users database means both apps know the same people. It does not share a login session between the apps. Enterprise SSO is the path when the organization already has Auth0 or Okta. Both apps send the person to that same company login. If the company login still has a session, the second app’s company button often does not ask for the password again. That is the identity provider remembering them. It is not one NotionApps session covering both apps.

How to use it

  1. Confirm the plan includes Auth0 or Okta. Enterprise SSO is the company tenant. It is the wrong tool for a simple client portal that only needs email OTP or email and password. For a client portal, people sign in to each app with that email method.
  2. In the identity provider, create the application NotionApps will use. You need the domain, client id, secret, and the callback addresses.
  3. The callback list must include every hostname you publish, including each custom domain. A missing hostname fails login only on that host.
  4. In NotionApps, follow the Integrations steps for Auth0 or Okta. Enable the additional-auth toggle on Users. There is no separate SSO screen.
  5. Do this for both apps, pointed at the same Auth0 or Okta tenant.
  6. The person must exist in the identity provider and in the Users database of each app. A shared Users database covers the NotionApps side. The identity provider still has to know them.
  7. Publish both apps.
  8. On the first app, choose Sign in with Auth0 or Sign in with Okta and complete login.
  9. Open the second app. Choose the same company button. When the identity provider still has a session, it returns them without asking for the password again. They still take that action on the second app. The first app’s login does not silently open the second.
  10. If the company session has expired, the second app asks the identity provider to sign them in. That is expected.

Email OTP and email-and-password users sign in on each app even when the Users database is shared. Use the company login when skipping the password on the second app matters.

Documentation