Single sign-on
- Status
- Available
- Region
- Global
- Vendor
- Google, Microsoft
- Data flow
- Staff sign-in to the wawa clinic app
- Connectivity
- Google and Microsoft sign-in (OAuth), in every region
- Set up by
- Each staff member, once; your identity administrator only if app approval is restricted
Clinic staff can sign in to wawa with their work Google (Google Workspace) or Microsoft (Microsoft 365) account instead of a password. Both options are available in every wawa region.
How it works
- Accounts are created in wawa, not by SSO. An administrator invites each staff member to wawa as usual. Signing in with Google or Microsoft only works for someone who already has a wawa account.
- Each person connects their account once. After signing in to wawa, open Settings → Security → Connected Accounts and connect Google or Microsoft. From then on, use Sign in with Google or Sign in with Microsoft on the wawa sign-in page.
- The email must match. The Google or Microsoft account's email is matched to the wawa user. An account already connected to another wawa user can't be connected again.
- Password sign-in stays available alongside SSO.
What we need from you
| Input | What to give us |
|---|---|
| Nothing, usually | Staff connect their own accounts; no setup is needed on the wawa side. |
| App approval | If your Google Workspace or Microsoft Entra ID tenant restricts which third-party apps users may sign in to, your administrator approves wawa once. |
| Matching emails | Invite staff to wawa with the same email address as their Google or Microsoft account. |
Two-factor authentication
- Staff can turn on two-factor authentication under Settings → Security with any authenticator app (time-based one-time codes), and get recovery codes to keep safe.
- Once on, wawa asks for a code at every password sign-in.
Sessions
- Without Remember me, staff are signed out after 30 minutes of inactivity. Use Remember me only on a private, personal computer.
- A different inactivity timeout for your whole clinic can be set on request; contact us.
In development
Enterprise single sign-on, and requiring SSO or two-factor authentication for every staff member, are in development In development. Contact support if you are interested.
Not currently supported
SCIM user provisioning. Tell us if you need it.
Patients
Patients sign in to the wawa patient app with email and password, or with Sign in with Apple.