Organize and approve

Single sign-on

Taktify supports single sign-on with OpenID Connect per organization: whoever enters an email address is sent to the matching provider by its domain. Local accounts, invitations, revocable sessions, a lockout after failed attempts and encrypted secrets complete the picture.

Your teams sign in with the account they already use. Taktify connects every organization to its own OIDC provider and finds it by the email domain.

How it works

  1. Enter the email

    Sign-in starts with the email address, not with a list of providers.

  2. Find the provider

    If the domain matches an organization, the sign-in goes straight to its OIDC provider.

  3. Back and signed in

    After signing in at the provider, the person is securely signed in to Taktify.

  4. Everything traceable

    Sessions stay revocable, and important changes are recorded in the audit log.

What you gain

  • Sign in as usual

    People use their existing account. Every organization adds its own OIDC provider.

  • Found by the domain

    If the email domain matches an organization, Taktify forwards straight to its provider.

  • Works without SSO too

    Local accounts and invitations bring external helpers and small teams on board quickly.

  • Secure behind the scenes

    Credentials are stored encrypted, sessions can be revoked, and repeated failed attempts trigger a lockout.

What is included

View roadmap
  • OIDC single sign-on

    OIDC per organization with email-domain discovery.

    Available
  • Local accounts

    Sign-in with a local account.

    Available
  • Invitations

    Add members by invitation.

    Available
  • Sessions and lockout

    Revocable sessions and lockout after failed attempts.

    Available
  • Encrypted secrets

    Credentials are encrypted at rest.

    Available
  • Audit log

    A traceable record of relevant actions.

    Available
  • Two-factor authentication

    Planned.

    Planned

More in this chapter

  • Organizations

    Taktify mirrors your structure: headquarters, regions, branches or local chapters as a tree of organizations. Every level works on its own, and the …

  • Approvals and roles

    No post goes out unchecked unless you want it to. Optional approval, a central review queue and five fixed roles define who may do what.

  • Sharing and reposts

    A post from headquarters reaches every team below without copy and paste. Each unit decides for itself whether to take it over manually, after its …

See Taktify in action

In a demo we show how the features work together in your structure. Or run Taktify yourself, free under the MIT license.