Organize and approve
Single sign-on
Taktify supports single sign-on with OpenID Connect per organization: whoever enters an email address is sent to the matching provider by its domain. Local accounts, invitations, revocable sessions, a lockout after failed attempts and encrypted secrets complete the picture.
Your teams sign in with the account they already use. Taktify connects every organization to its own OIDC provider and finds it by the email domain.
How it works
-
Enter the email
Sign-in starts with the email address, not with a list of providers.
-
Find the provider
If the domain matches an organization, the sign-in goes straight to its OIDC provider.
-
Back and signed in
After signing in at the provider, the person is securely signed in to Taktify.
-
Everything traceable
Sessions stay revocable, and important changes are recorded in the audit log.
What you gain
-
Sign in as usual
People use their existing account. Every organization adds its own OIDC provider.
-
Found by the domain
If the email domain matches an organization, Taktify forwards straight to its provider.
-
Works without SSO too
Local accounts and invitations bring external helpers and small teams on board quickly.
-
Secure behind the scenes
Credentials are stored encrypted, sessions can be revoked, and repeated failed attempts trigger a lockout.
What is included
View roadmap-
Available
OIDC single sign-on
OIDC per organization with email-domain discovery.
-
Available
Local accounts
Sign-in with a local account.
-
Available
Invitations
Add members by invitation.
-
Available
Sessions and lockout
Revocable sessions and lockout after failed attempts.
-
Available
Encrypted secrets
Credentials are encrypted at rest.
-
Available
Audit log
A traceable record of relevant actions.
-
Planned
Two-factor authentication
Planned.
Matching use cases
More in this chapter
-
Organizations
Taktify mirrors your structure: headquarters, regions, branches or local chapters as a tree of organizations. Every level works on its own, and the …
-
Approvals and roles
No post goes out unchecked unless you want it to. Optional approval, a central review queue and five fixed roles define who may do what.
-
Sharing and reposts
A post from headquarters reaches every team below without copy and paste. Each unit decides for itself whether to take it over manually, after its …
See Taktify in action
In a demo we show how the features work together in your structure. Or run Taktify yourself, free under the MIT license.