As a Tango portal admin with Manage Authentication rights, you may need to manage SSO connection(s). SSO connection is one way to log in to your Tango portal along with other ways such as username/password or Google (oauth2). By managing your SSO connection, you can disable, edit, or delete the SSO connection(s). See how you can create an SSO connection: Add SSO connection in Tango portal (for admins) .
Note that you can have multiple SSO connections for different organizations on your Tango portal. That is your customers can create their own SSO connections on the same Tango portal as yours.
Who’s this guide for?
This guide is for Tango account administrators with Manage Authentication rights to help manage SSO connection.
Disable SSO connection
If an SSO authentication is disabled, access to the SSO method will be disabled for all users. Users must set up a different SSO method the next time they log in. You must have at least one method enabled. All SSO methods are enabled by default.
To disable SSO authentication on your platform:
-
Sign in to the Tango portal with manage authentication permissions.
-
Go to 
Team settings > Authentication.
-
Find OIDC SSO or SAML SSO on the list and click Disable.
A message box warns you that access to this login method will be stopped for all platform users.
-
Click Disable for all users.
If logged out, you cannot log back in using the disabled SSO. You must use a different method such as email and password or Google SSO, or set up a different MFA method next time you log in. Contact your Customer Support Manager (CSM) or success@tangocard.com.
Edit SSO connection
You may need to correct some values, update the expired signing certificate, or update the metadata URL. The default connections on your platform cannot be edited by admins, but they can be disabled.
To edit the SSO connection:
-
Sign in to the Tango portal with manage authentication permissions.
-
Go to 
Team settings > Authentication.
-
Find OIDC SSO or SAML SSO on the list.
-
Click ellipsis
menu then select Edit and make the necessary changes.
-
Click Update.
Delete SSO connection
Admins can delete the SSO authentications apart from the default connections (google-oauth2 and username/password). The default SSOs on your platform cannot be deleted by other users.
To delete SSO authentication:
-
Sign in to the Tango portal with manage authentication permissions.
-
Go to 
Team settings > Authentication.
-
Find OIDC SSO or SAML SSO on the list.
-
Click ellipsis
menu then select Delete and confirm.
More resources
