SSO

Accounts are created and managed within the organization’s own identity system, and are created via identity authentication protocols (such as OIDC) through API calls. Preset configurations are currently available for Jiuzhou Yunteng IDaaS, Zhucloud IDaaS, GTS ECUS, and Shuxi Cloud Identity Connector.

II. Operation Flow

Interface	Instructions
Query User Details API: https://open.dingtalk.com/document/orgapp/query-user-details Create SSO Account API: https://open.dingtalk.com/document/orgapp/create-an-sso-account	Account synchronization integration: 1. Use the Query User Details API to obtain the userid of employees in the organization. 2. In your own account system, establish the mapping between your accounts and DingTalk accounts. Unique matching value: userid. 3. Use the Create SSO Account API to synchronize your accounts to DingTalk.

In the Admin Console, go to Organization settings > SSO to configure the sign-in method.

SSO sign-in configuration in the Admin Console

Getting Started

Organization & Members

Organization Settings

Security & Permission

App Management

Billing

II. Operation Flow

​II. Operation Flow

II. Operation Flow