Skip to main content
To provide a secure login experience across all tenants, Lumos only supports logins via Single Sign-On (SSO). Lumos supports SSO through Google and Microsoft, as well as SAML-based SSO through providers such as Okta, Entra, and OneLogin.

​
Supported login flows

Lumos supports two SAML login flows:

​
1. Service Provider (SP)-Initiated Login

This is the most common flow, where the user begins the login process directly from the Lumos app. Steps:
  1. The user navigates to https://app.lumosidentity.com/.
  2. The user enters their work email address (e.g., user@company.com).
  3. Lumos extracts the domain (e.g., company.com) and determines the associated tenant.
  4. Lumos redirects the user to their SAML Identity Provider (IdP), such as Okta, Microsoft Entra ID, or Google Workspace.
  5. The IdP authenticates the user and sends a SAML response to Lumos.
  6. Lumos parses the email from the SAML payload, verifies that it belongs to an active user in the tenant, and logs the user in.
  7. The user is redirected to the Lumos home page.

​
2. Identity Provider (IdP)-Initiated Login

This flow starts when the user launches the Lumos application directly from their SAML provider (e.g., clicking a tile in Okta). Steps:
  1. The user clicks the Lumos app/tile from within their SAML provider.
  2. The IdP sends a SAML response to Lumos.
  3. Lumos extracts the email from the payload, identifies the tenant based on the domain, verifies the user, and logs them in.

​
Requirements for SAML login

  • All users must access Lumos via the same URL: https://app.lumosidentity.com/
  • The email domain (e.g., @company.com) used to log in must be bound to a Lumos tenant. This configuration is handled by Lumos Support.
  • A Lumos tenant can be bound to multiple email domains, but each email domain can only be bound to one Lumos tenant.
  • The SAML response must include the email address of the user for identification.

​
Need help?

If you’re having trouble logging in or need help configuring your SAML connection, please contact Lumos Support.