SSO — Agents
Enable brand-managed SSO for agent access to Reach Central via your Identity Provider (IdP).
Overview
Agent SSO lets internal users log in to Reach Central using credentials managed by your organization.
Reach delegates authentication to your Identity Provider (IdP). Reach does not store agent passwords.
What it is: Brand-managed SSO for Reach Central users.
What problem it addresses: Centralizes access control, MFA, and deprovisioning in your IdP.
Who it is intended for: Brand care, sales, operations, and admin users of Reach Central.
Typical use cases
Use existing corporate login for Reach Central
Enforce brand MFA policies for agent access
Simplify onboarding and offboarding of agents
Scope
What is included:
SSO integration for Reach Central agent login
Basic identity attribute mapping
Session creation and agent attribution in audit logs
What is excluded:
Customer SSO
Authorization decisions made by your IdP
Automatic permissioning in Reach Central based on IdP groups
Brand inputs
Which IdP will be used and who owns it
Which identity fields Reach Central should use
A small set of test users for validation
Approval owner for go-live
Requesting this bolt-on
For the standard process, commercial notes, and support, see Bolt-ons catalog.
Technical details
For the implementation-specific setup details, visit: SSO technical details
Frequently asked questions
When should we request agent SSO?
Request it when your brand IdP is ready for Reach Central integration.
What happens after we purchase?
Reach confirms the scope and collects your IdP details.
Last updated