Hibira Live Chat
English
Join the waitlist

Single sign-on

Staff sign in from the admin panel they already use

Your server signs a short-lived token and sends staff straight to the inbox. No extra passwords, and new staff become agents on their first sign-in.

Plans JWT sign-on from Starter. OIDC and SAML on Business

Join the waitlist See pricing
Single sign-on settings in the Live Chat portal with the sign-in address your server sends staff to.
Create a secret, sign a token on your server, send staff to one address.

Your rules

One place to manage who gets in

Staff who leave your admin panel lose their way into the inbox too. You can require sign-on for every agent, and see each sign-in in the activity log.

  • Tokens signed with HS256, valid for at most 5 minutes
  • Require sign-on for every agent
  • Every sign-in recorded in the activity log
The team members page with the owner and two agents.
Agents who sign in by SSO appear in your team automatically.

How it works

1. Create a secret

In the portal, under Team → Single sign-on. Only your server keeps it.

2. Sign a token

Your admin panel signs a short token with the staff member's email and name.

3. Send them to the inbox

Link to the sign-in address with the token. They land in the inbox, already signed in.

Verified visitors

Signed-in customers on your site can show as verified in the inbox, so agents know who they are talking to.

Questions

Do agents still need an email invite?

No. An agent who signs in through SSO for the first time is added to the team automatically, up to your plan's agent count.

What if the secret leaks?

Create a new one in the portal. The old secret stops working at once.

Do you support Google Workspace, Microsoft Entra ID or Okta?

Business adds OIDC and SAML for those and other identity providers.

More features

Be first in line

Leave your email and we'll send your invite as soon as your spot opens.

Join the waitlist