Skip to main content
Two-Factor Authentication & SSO

How Two-Factor Authentication & SSO for Odoo works inside: a glossary of menus, jobs and models

Two-Factor Authentication & SSO for Odoo puts everything under a single menu, Settings › Authentication, with seven entries (IdP connections, MFA policies, a coverage report, two logs, active sessions and settings), and ships nine active scheduled actions running anywhere from every 5 minutes to once a year. This glossary walks through each piece by the exact name you will see on screen, so you know where to look and what each item is.

FlexigoTech · Editor in charge: Víctor Gómez · Updated 4 November 2026

Key facts

Versions
Odoo 17, 18, 19 and 20
Checked
in the module's source code, version 20.0 · against the sources linked at the end
Reading time
5 min

Where it lives: the Settings › Authentication menu

The Odoo Apps listing introduces the module with the heading SSO and two-factor login for Odoo Community. Once installed, everything sits under Settings › Authentication. Below it you will find seven entries, grouped here by topic. Names are given exactly as they appear on screen.

Identity provider connection

IdP Connections
Path Settings › Authentication › IdP Connections. The list of connections to identity providers (IdPs). The screenshot below shows two records, Google Workspace OIDC and Microsoft Entra ID SAML, with columns for protocol, company, active, JIT provisioning and fallback mode.
Provisioning Log
Path Settings › Authentication › Provisioning Log. A dedicated log for provisioning, kept separate from the authentication event log.
List of IdP connections in Odoo Settings with Google Workspace OIDC and Microsoft Entra ID SAML records
The IdP Connections list with two records and its protocol, company, active, JIT provisioning and fallback mode columns.

Two-factor authentication

MFA Policies
Path Settings › Authentication › MFA Policies. Where the multi-factor (MFA) policies live.
MFA Coverage Report
Path Settings › Authentication › MFA Coverage Report. In the animated walkthrough it appears as a list with two policies, Admin MFA Enforcement and Regular User MFA, showing company, accepted factor types, grace period and active status.

Control and auditing

Auth Event Log
Path Settings › Authentication › Auth Event Log. The module's authentication event log.
Active Sessions
Path Settings › Authentication › Active Sessions. A list of sessions with columns for start, user, IdP connection, authentication method, IP and last activity, plus a Terminate button.
Settings
Path Settings › Authentication › Settings. The module's own settings entry, inside the same menu.
Active sessions list with an IdP connection column and rows for Administrator and OdooBot
The same list with the IdP connection column shown next to the authentication method.
Walkthrough of active sessions, IdP connections and the MFA coverage report in Settings
Sequence: the active sessions list with search, the same list with the IdP connection column, the IdP connections list and the MFA Coverage Report with two MFA policies.

The records underneath: the module's models

If you are a consultant, or you are about to touch access rights, reports or imports, it helps to know the technical model names. Besides flexigo.active.session (description FlexigoTech Active Session), flexigo.event.log (FlexigoTech Authentication Event Log) and flexigo.fido2.credential (FlexigoTech FIDO2 Credential), these are the ones worth recognising:

Identity models

flexigo.idp.connection
Description FlexigoTech IdP Connection. The model for identity provider connections.
flexigo.idp.attribute.mapping
Description FlexigoTech IdP Attribute Mapping. A separate model for IdP attribute mapping.
flexigo.idp.group.mapping
Description FlexigoTech IdP Group Mapping. Another separate model, this one for IdP group mapping.
flexigo.idp.user.binding
Description FlexigoTech IdP User Binding. The model holding the binding between IdP and user.

Access control models

flexigo.mfa.exemption
Description FlexigoTech MFA Exemption. The model for MFA exemptions.
flexigo.access.recheck
Description FlexigoTech access check after a write. Going by its description, an access check after a write. Six models inherit it: flexigo.active.session, flexigo.fido2.credential, flexigo.idp.attribute.mapping, flexigo.idp.group.mapping, flexigo.idp.user.binding and flexigo.mfa.exemption.

If you build on top of the module, bear that inheritance in mind: the six models listed share flexigo.access.recheck as a base.

What runs on its own: the scheduled actions

The module comes with nine scheduled actions, all active. Every one carries the Flexigo Auth: prefix, so you can search for them by that text. From most to least frequent:

  • Flexigo Auth: Failed-Login Pattern Scan, every 5 minutes.
  • Flexigo Auth: Concurrent Session Cleanup, every 15 minutes.
  • Flexigo Auth: IdP Metadata Auto-Refresh, every 24 hours.
  • Flexigo Auth: Audit Log Anonymisation, every day.
  • Flexigo Auth: Certificate Expiry Check, every day.
  • Flexigo Auth: MFA Grace-Period Enforcement, every day.
  • Flexigo Auth: Recovery Code Batch Cleanup, every 7 days.
  • Flexigo Auth: MFA Coverage Monthly Snapshot, every month.
  • Flexigo Auth: Annual Security Statistics, every 12 months.

The first two run most often; the rest range from daily to yearly. If you review activity on your database, these are the names you need to recognise.

The pieces that touch a single login

With what the screens show, you can follow a login across menus. A connection lives in IdP Connections (model flexigo.idp.connection), with its attribute and group mappings and its user bindings in their own models. The Active Sessions list shows, for each session, the IdP connection and the authentication method, so from there you can see which connection sits behind each session. Two-factor policies are in MFA Policies, and the MFA Coverage Report shows them with their grace period and active status. Events and provisioning end up in their two logs, Auth Event Log and Provisioning Log.

The fields to fill in and the states each record goes through are covered in the module's setup guide. If a message stops you along the way, check the errors and warnings with their exact text.

What to know about the service and versions

The module is published on Odoo Apps for 17.0, 18.0, 19.0 and 20.0, at €9 per Odoo version as a one-off payment, excluding VAT, on all four. The listing warns that some features use a paid external service: that is the FlexigoTech Cloud local service, at €29/month or €290/year excluding VAT (Pro: €58/month or €580/year). Without a subscription, or with the service suspended, whatever the subscription provides stops; your data stays in your Odoo. With the subscription, the module for new Odoo versions is included if you bought it on flexigotech.com; on the Odoo App Store, each version is bought there. The listing also has its own Privacy policy section.

How FlexigoTech can help

At FlexigoTech we implement Odoo 17, 18, 19 and 20 and build bespoke connectors and integrations, so we can help you get this menu configured or adapt the module to your case. You will find the details on the module page and on its Odoo Apps listing. If you are still unsure whether it fits, start with what it covers and what you need before installing it.

Keep reading

Two-Factor Authentication & SSO for Odoo errors: when each message appears and what to doThe error messages in Two-Factor Authentication & SSO for Odoo (FIDO2, OIDC, SAML, mappings and the event log): when each appears and what to do about it.Setting up Two-Factor Authentication & SSO for Odoo, question by questionWhich fields to fill in on the OIDC or SAML configuration, how to map claims and groups and what to check in week one with Two-Factor Authentication & SSO for Odoo.Two-Factor Authentication & SSO for Odoo: when it fits and what to have readyWhat Two-Factor Authentication & SSO for Odoo covers and leaves out according to its README, what you need before installing and which Odoo versions.
Checked in the module's source code (version 20.0) and the linked sources

Sources