[null, {"document_url": "https://community.forumbee.com/t/18hwg9/single-sign-on-sso-developer-documentation", "unformatted_src": "https://s3-us-west-2.amazonaws.com/media.forumbee.com/i/9fbc6f6e-1be4-4404-aa6f-893ffd2b6edd/547.png", "src": "https://s3-us-west-2.amazonaws.com/media.forumbee.com/i/9fbc6f6e-1be4-4404-aa6f-893ffd2b6edd/547.png", "rendered_width": 333}, null, {"document_url": "https://community.forumbee.com/t/18hwg9/single-sign-on-sso-developer-documentation", "unformatted_src": "https://s3-us-west-2.amazonaws.com/media.forumbee.com/i/0faf8938-6253-4fe3-844f-c98fafed3e7e/547.png", "src": "https://s3-us-west-2.amazonaws.com/media.forumbee.com/i/0faf8938-6253-4fe3-844f-c98fafed3e7e/547.png", "rendered_width": 333}, null, {"document_url": "https://community.forumbee.com/t/18hwg9/single-sign-on-sso-developer-documentation", "unformatted_src": "https://s3-us-west-2.amazonaws.com/media.forumbee.com/i/c8233853-ab89-455d-97e3-4bb895522129/547.png", "src": "https://s3-us-west-2.amazonaws.com/media.forumbee.com/i/c8233853-ab89-455d-97e3-4bb895522129/547.png", "rendered_width": 580}, {"document_url": "https://community.forumbee.com/t/18hwg9/single-sign-on-sso-developer-documentation", "unformatted_src": "https://s3-us-west-2.amazonaws.com/media.forumbee.com/i/101cb724-1a19-4862-9d0c-bf6492a59d29/547.png", "src": "https://s3-us-west-2.amazonaws.com/media.forumbee.com/i/101cb724-1a19-4862-9d0c-bf6492a59d29/547.png", "rendered_width": 580}, null, null]

Single Sign-On (SSO) Developer Documentation

What is Single Sign-On?

In basic terms, Single Sign-On (SSO) allows users of your web site to log into your Forumbee community automatically, without needing to sign up and create another account.

Implementation of SSO on your web site requires technical development skills. This article is intended to give the information needed for a developer to implement SSO to Forumbee from your web site.

SSO Settings for Your Community

To use the SSO API, please contact support or your account manager to enable it for your account. (Requires the Enterprise plan.)

Once SSO is enabled you will find it in Admin â Settings â SSO. Secret key

You will use this secret key later when you construct your URL to generate a SHA-1 hex digest.

NOTE: You should keep your secret key private and never publish it.

Handling direct community login/logout

Remote login URL

When you implement SSO you manage the login process for users into the community from your remote application. However it is still possible for a user to access your community directly, such as through a bookmark or a link in an email notification.

When a non-logged in user accesses your community directly, they will be prompted to login.

To transfer control of the login to your remote application, specify a remote login URL. When prompted to login or sign up, the user will be redirected to the URL you specify. This should be a URL in your remote system that allows the user to login or sign up and then passes them back to your community via SSO.


Your remote login URL replaces the standard Forumbee login page. If you still need to login through the Forumbee login page after you set your remote login URL, use the direct login page. Access the direct login page by appending â/login/directâ to your community domain URL:

Remote log out URL

When the user clicks log out in the community they will be sent to the URL you specify. Typically this would be a URL that also logs the user out of your remote system. The user key is passed (Base64 and URL encoded) on the Remote log out URL as a convenience for you to track the user.

SSO Implementation Instructions

From your remote application construct a unique URL login link for the user that includes a Base64-encoded JSON object containing user fields as shown below and a message digest ensuring the validity of the data. Use this URL to redirect the user to the community or to present a navigation link to the user.

SSO login URL structure:

During your implementation, use the SSO Developer Tool described below for documentation and testing.

SSO Parameters

Custom Profile Fields

Custom profile fields are available as SSO parameters. The SSO parameter name is _fieldname where fieldname is the custom profile field name. Note that custom profile fields must be enabled for your community before they can be used in SSO. Contact your account manager or email@example.com for more information.

Steps to create the login URL token

1. Construct a JSON object containing the following:

All parameters should be passed as quoted strings. Example:

2. Base64 encode the result of step 1.

3. Compute a SHA-1 hex digest by combining your SSO secret key and the Base64 result from step 2.

4. Convert the digest from step 3 and the Base64 data from step 2 into URL Encoded parameters.

5. Construct the final URL with the digest and data from step 4 as query parameters.

URL structure:

If you are using domain aliasing, replace {mysubdomain.forumbee.com} with your domain alias. Example:

Using the SSO Developer Tool

During your implementation, use the SSO Developer Tool for documentation and testing.

Navigate to the Admin area â Settings â SSO, and click SSO Developer Tool. Create SSO URL Validate SSO URL

To test whether your SSO URLs are constructed properly, use the Validator.

User account creation and updates

When a user clicks through on your SSO link, Forumbee will look for the user in the community based on their SSO key or email. If no matching user is found, SSO will create a new user with the SSO parameters provided. If a matching user is found, by default SSO will not update existing values for name, user-uploaded avatar, or tagline. If avatar or tagline were previously blank, or if the avatar was previously set by SSO, they will be updated by SSO.

Example scenario 1:

Janet previously joined the community, uploaded her avatar and created her tagline. Later she logs in with SSO. Her existing name, avatar and tagline will not be updated by SSO by default. This ensures that the edits she made to her profile are not lost when she logs in again with SSO.

Example scenario 2:

Ross previously joined the community, but did not upload an avatar or set a tagline. Later he logs in with an SSO link that includes values for the avatar and tagline parameters. His profile is updated with the avatar and tagline passed by SSO.

Overwrite Parameter

If the SSO overwrite parameter is set to 1, it will update the user name, avatar and tagline with the values provided. It is a best practice to only use this parameter in cases where you need to reset a member.

User roles

One of the following roles can be assigned to a user with the SSO role parameter.


This is the member role and is the default if no role is specified. Permissions:


Permissions include all member capabilities plus:

Category Moderator

Category moderators are members with additional abilities for categories to which they are assigned as a moderator:

To assign a category moderator through SSO, set role to 1 and list the categories in the forums parameter. The user will be assigned as a category moderator to all listed categories.

SSO Code Example

Example SSO code example in C#:


10replies Oldest first

