Place2Book Developers
api@place2book.com

Single sign-on

Organisations can let their employees sign in to Place2Book with their existing work login instead of a Place2Book password. Place2Book supports two SSO solutions:

Fælleskommunal AdgangsstyringFor Danish municipalities. Login through KOMBIT's Context Handler, with roles managed centrally by the municipality. Microsoft Entra ID PreviewFor organisations on Microsoft 365. SAML 2.0 login through an enterprise application in your own tenant.

To get started, contact support@place2book.com. Place2Book sets up a SAML provider for your organisation and gives you the values to configure on your side.

Comparison

  Fælleskommunal Adgangsstyring Microsoft Entra ID
For Danish municipalities Any organisation with Entra ID
Protocol OIOSAML 3 through KOMBIT Context Handler SAML 2.0
Who can sign in Employees the municipality has given a Place2Book role Users you give access to the enterprise application
Roles Sent at every login and synced automatically Assigned in Place2Book, or with the Permissions API
Status Available Preview

How sign-in works

  1. The employee enters their work email on the Place2Book login page.
  2. If the email belongs to an SSO user, or its domain is registered to your organisation, Place2Book sends them to your identity provider. They never see a password field.
  3. After login, Place2Book creates or updates the user from the claims your identity provider sends. With Fælleskommunal Adgangsstyring, it also updates the user’s roles.

SSO also works in the Place2Book scanner app.

The session lasts as long as your identity provider allows (SessionNotOnOrAfter), or 24 hours if it sends no limit.

Existing Place2Book accounts If an employee already has a Place2Book account with the same email, it is linked to their SSO login the first time they sign in. Their Place2Book password is removed at that point, so from then on they can only sign in through SSO.

Email domains

Place2Book can register your organisation’s email domain, for example korsbaek.dk. Employees with that domain are then sent to your identity provider even before they have a Place2Book account, and their account is created at their first login.

Organisers

Each organiser (event maker) on Place2Book has a UUID. Roles always apply to specific organisers, identified by these UUIDs. Place2Book issues the UUIDs, and users with the SAML Administrator role can see them on the SAML Administrator page.