Gearset authenticates users via external identity providers using two mechanisms:
OAuth
Login via Google, LinkedIn and Salesforce
Creating Salesforce org connections
Creating linked service connections (Git, JIRA, etc.)
SAML (Available for customers on the Deployment Enterprise or Data Backup Enterprise tiers)
Login via your own identity provider via a SAML configuration
As well as utilizing Google SSO, if your company uses an identity provider that supports SAML then this can be used to add SSO login to Gearset. Additionally, it is possible to utilize the SSO configuration within Salesforce to benefit from SSO when logging into Gearset via Salesforce or when making Salesforce org connections.
Logging in via OAuth
Gearset uses the secure OAuth 2.0 process to manage your account. This means that we never have access to, or store, your account password. You can log into Gearset using one of the following accounts you already have:
Salesforce
Google
LinkedIn
Simply click the account type you'd like to use, and enter your username. Gearset will then request permission to connect to this account and link it to your Gearset user.
Logging in with SSO
As we delegate all account management to the service you're using to log in, we support any additional security configuration you may already have for that service. For example:
Microsoft Active Directory Federation Services (ADFS)
Security Assertion Markup Language (SAML)
If your account has Two-Factor Authorization (2FA) enabled, you may need to create an account-specific password for Gearset to use during the authentication process. You can do this in the account management of your chosen service.
Logging in via SAML
Team owners can configure a SAML connection for their team which will allow users to log in via their own identity provider. To login, simply select the SAML login button and enter the friendly name that was specified during SAML configuration (ask your team owner what this is for your team).
Once you have logged in successfully via SAML, this will be the default login method. You can always choose "Login another way"
Connect to Salesforce orgs via SSO
Ensure you have enabled custom domain for the org(s) you wish to connect to Gearset
Add a new org in Gearset, from your connections page, and hit
Authorize:
3. Choose Use Custom Domain:
4. Enter your custom domain, and hit Continue
5. Under Or log in using, you should see your SSO option pop up:
Enable username/password access
You can also enable username/password access in the org, generate a set of credentials, and use those to login to Gearset.
You can learn more about our security approach here.
Connect to git connections with SSO
Gearset can only talk to git providers' OAuth. If you log into your source control provider through an SSO portal (such as Okta), note that Gearset won't be able to. You would have to get access to the underlying git credentials, and log in using those.