One sign-in for every app
Tooly SSO is the private single sign-on service for itpro360's self-hosted apps. Sign in once with your password and authenticator code, and every connected app lets you straight in.
Sign in once
Apps like photo libraries, documents and dashboards send you here to sign in. After that you move between them without typing your password again.
Always two-step
Every account uses an authenticator app (such as Google Authenticator, 1Password or Authy) plus one-time recovery codes. There's no way to turn it off.
Access by group
An administrator decides which apps each person can use by adding them to groups. Apps also receive your groups so they can set your permissions.
How sign-up works
Accounts are invite-only right now. Ask the administrator for an invite code, then choose Sign up, enter the code with your name, email and a password, and set up your authenticator app.
Questions
Which apps can I use?
After you sign in, the homepage lists the apps your groups allow. If one is missing, ask the administrator.
I lost my phone.
Use one of your recovery codes on the sign-in screen, then set up the authenticator again from your account page. No codes left? The administrator can reset your two-step setup.
Does signing out here sign me out of every app?
It ends your single sign-on session, so apps will ask you to sign in again the next time they check. Apps that keep their own session stay signed in until you sign out of them too.
What do you keep about me?
Your account details, groups, and a security log of sign-ins with IP address and device. The Privacy Policy has the full list and how long each item is kept.