2026-03-10: CE - Single Sign On (SSO) - Token Exchange

Overview

We introduced a Token Exchange flow that lets enterprise customers connect Emporix to existing identity and platform ecosystems without changing their current login experience.

Customers authenticate users in their own system, then securely exchange that result for access to Emporix. That improves integration flexibility, preserves clear responsibility boundaries, and enables consistent token validation across distributed architectures.

New features

Feature	Benefit
Flexible integration with token exchange	Easily connect Emporix with internal and third-party services without redesigning your architecture.
Clear flow ownership - client authentication, Emporix authorization	Keep control of your customer login while ensuring Emporix enforces permissions reliably within its domain.
External token validation support	Use externally issued tokens confidently while Emporix maintains a consistent and secure token model.
Reuse of authentication results (access token exchange)	Avoid duplicate logins and reduce integration effort by reusing your existing authentication outcome.
System preferences - Control SSO auto-provisioning and customer identifier (EMAIL/SUBJECT)	Flexible onboarding - auto-create new users or block unknown users for stricter control.

Fixes and improvements

None as this is a new feature.

Known problems

No known problems at the time of release.

Documentation and links

User Guides:

• Token Exchange

• System Preferences

API:

• Customer Service API