What is the difference between SP- and IdP-Initiated SSO?

Background

Single Sign-On (SSO) allows you to use one set of login credentials to access multiple applications, including Procore. Depending on how your organization configures access, you can initiate the login process either directly from the Procore login page or from your organization's internal portal. Knowing where to start helps ensure a seamless authentication experience.

Answer

The primary difference is where the authentication workflow begins: at the Procore login page (service provider–initiated) or inside your organization's sign-in dashboard (identity provider–initiated).

Feature

IdP-Initiated SSO

SP-Initiated SSO

Starting Point

Organization SSO Portal / Dashboard

Procore Login Page

User Action

Clicks Procore tile inside company portal

Enters email at Procore login

Authentication Flow

IdP → Procore

Procore → IdP → Procore

See Also

Loading related articles...