To sign in to Reflect, you may sometimes want to set up an advanced enterprise SSO (SAML 2.0).
Why choose this authentication method?
Enhanced security : Aligned with your internal policies (e.g. MFA, password rotation).
Centralized management : User accounts are created and revoked directly in your directory (Azure AD, Okta, etc.).
SAML 2.0 approach : Recognized standard, facilitating integration with other enterprise applications.
Recurring cost
Reflect uses the secure provider WorkOS to integrate with any type of SSO. Reflect re-bills the recurring subscription charged by WorkOS at no extra cost.
The current price is: €125 / month.
How does it work?
Contact the Reflect team:
Indicate that you want to enable SSO via WorkOS.
Specify which identity provider (IdP) you use (Azure AD/Entra ID, Okta...).
Provide the name and email of the SSO administrator
Configure the SSO :
The administrator will receive an email with the steps to follow to enable connection via WorkOS.
Approve and test
Depending on your configuration, you may need to approve the application with an administrator account.
Once validated, test the connection by connecting to Reflect.
Difference with Microsoft OAuth or Google OAuth
Microsoft OAuth / Google OAuth (free) : Allows your teams to sign in to Reflect with their professional Microsoft / Google account without additional costs.
SSO via WorkOS (SAML, paid) : Advanced integration to manage access through your company directory with greater control over permissions and security.