This article explains single sign-on (SSO) for your organization and which organization settings you manage yourself versus which CustoMED manages for you. It is for Organization Admins and IT teams.
Single sign-on (SSO)
CustoMED supports SSO with SAML and OIDC, so your users sign in with your existing identity provider. Google (OIDC) and Microsoft Entra ID (SAML) are supported, and other SAML or OIDC providers can be set up as a custom connection. If users can't sign in, see Sign-In, Access & Account Troubleshooting.
Each organization can have one identity provider.
SSO is tied to your organization's email domain.
The CustoMED team sets up and changes the connection for you.
Set up SSO
Send your identity provider details (SAML or OIDC) and your email domain to CustoMED.
CustoMED configures the connection for your organization.
Test with a pilot user, then roll out to the rest of your organization.
How sign-in works with SSO
The user enters their email on the Sign In page and clicks Continue with Email.
If the email is at your domain, CustoMED shows a button to continue with your identity provider instead of a password field.
The user signs in with your identity provider and returns to CustoMED.
SSO users do not have a CustoMED password, so Forgot Password? does not apply to them. Password changes and account lockouts are handled in your identity provider.
Note: Each user still needs a CustoMED user in your organization with the right role. Add them under Users. Someone who signs in without being set up sees Account Setup Required and is asked to contact their organization's administrator.
What you manage yourself
Users and their roles. See Managing Users & Roles.
Medical Centers. See Medical Centers & Printing Facilities.
SKUs printed on your output labels. See Hardware Library & SKUs.
What CustoMED manages for you
Contact CustoMED to change any of these:
Organization name, timezone and supervision type.
The times of day reminder emails go out.
Licensed procedures and case quotas. See Case Quotas & Billing Alerts.
Implant manufacturers, templates and PSI types.
Printing facilities linked to your organization.
Access tokens for the PACS Gateway. See PACS Gateway & Pending DICOM.
SSO and allowed email domains.