Setup Single Sign-On (SSO) for True Anthem Access

Updated May 15, 2026 20:03

For Enterprise Professional Tier partners, True Anthem supports Single Sign-On (SSO) using the OpenID Connect (OIDC) standard. This guide provides the necessary information and steps to integrate True Anthem with your organization's identity provider, ensuring a seamless and secure authentication experience.

Note: True Anthem Single Sign-On (SSO) is only available to Professional packages.

If you would like to discuss what is required for your account to access True Anthem SSO, please contact your Customer Success Manager.

Enabling SSO for Your Organization

To enable SSO, ensure that each user's True Anthem login email matches the one used with your identity provider. True Anthem supports OIDC-compatible providers such as Google, Microsoft, and Okta. Please contact your Customer Success Manager to initiate the setup process.

Step 1: Required Information for True Anthem

Once you have created the application in your OIDC provider, provide the following information to your True Anthem representative:

Authentication Email Address Domain: The specific domain used by your users (e.g., @yourcompany.com). Note: We support one domain per customer.
OIDC Client ID: Found in your Okta Application settings.
OIDC Issuer URL: Your unique Okta domain URL.
OIDC Client Secret: The secure secret key associated with the application.

Step 2: Technical Configuration Settings

To ensure the integration functions correctly, configure your Application as the follows:

Category	Required Setting
Flow Type	OIDC Implementation must use Code Flow.
Grant Types	`Authorization Code` and `Refresh Token` must be enabled.
Response Type	`Code` is required.
Security	Ensure Require PKCE is turned OFF.

Step 3: Redirect URIs and Web Origins

In your Application settings, configure following URLs

Login Redirect URIs (Callback URLs)

Production: https://dashboard.trueanthem.com/__/auth/handler
Test/Staging: https://app.elecktra.net/__/auth/handler

Allowed Web Origins

Production: https://dashboard.trueanthem.com/
Test/Staging: https://app.elecktra.net/

Step 4: Verification

Before sending the credentials to True Anthem, verify your configuration by visiting your "well-known" endpoint:

[Your_Issuer_URL]/.well-known/openid-configuration

Ensure the response contains:

grant_types_supported includes "authorization_code" and "refresh_token"
response_types_supported includes "code"
claims_supported includes "preferred_username" and "email"

Step 5: Test Account

To confirm the implementation is successful, provide True Anthem with a temporary Test Login Account.

Once we have verified the SSO connection, this account can be safely removed from your system.

Related to:

Account Settings