{"id":8438,"date":"2026-10-08T10:19:08","date_gmt":"2026-10-08T08:19:08","guid":{"rendered":"https:\/\/helpdesk.kontainer.com\/article\/establecer-una-conexion-sso\/"},"modified":"2026-10-08T10:19:08","modified_gmt":"2026-10-08T08:19:08","slug":"establecer-una-conexion-sso","status":"publish","type":"article","link":"https:\/\/helpdesk.kontainer.com\/es\/article\/establecer-una-conexion-sso\/","title":{"rendered":"Establecer una conexi\u00f3n SSO"},"content":{"rendered":"<p class=\"p1\">Puedes dar de alta usuarios en Kontainer mediante SSO para ofrecer una experiencia segura y fluida a tus usuarios internos.<\/p>\n<p class=\"p1\">Tenemos una configuraci\u00f3n est\u00e1ndar para Microsoft Entra ID, ADFS y Google. <a href=\"mailto:js@kontainer.com?subject=SSO%20Enquiry\"><strong>Cont\u00e1ctanos para otras configuraciones<\/strong><\/a>.<\/p>\n<p class=\"p1\">Creamos una relaci\u00f3n de confianza (\u00abTrust\u00bb) entre tus grupos de Active Directory (gestionados por tu departamento de TI) y Kontainer. Esto significa que el usuario se crea autom\u00e1ticamente y se asigna a grupos predeterminados la primera vez que inicia sesi\u00f3n.<\/p>\n<p class=\"p1\">Como con cualquier otro grupo de Kontainer, siempre puedes cambiar y gestionar los ajustes de acceso.<\/p>\n<p class=\"p1\">Tambi\u00e9n puedes asignar derechos adicionales a usuarios concretos, que se suman a los permisos b\u00e1sicos que heredan de su pertenencia a un grupo.<\/p>\n<p class=\"p1\">Para mantener manejable tu lista de usuarios, puedes definir reglas que desactiven o eliminen a los usuarios que no hayan iniciado sesi\u00f3n durante un tiempo determinado, como 2, 4 o 6 meses. Si un usuario vuelve a iniciar sesi\u00f3n despu\u00e9s de haber sido eliminado autom\u00e1ticamente, su usuario simplemente se reactiva.<\/p>\n<p class=\"p1\">Junto con los usuarios de SSO, puedes a\u00f1adir otros usuarios y grupos manualmente.<\/p>\n<p>Ve a la <a href=\"https:\/\/kontainer.com\/es\/integrations\/sso\" target=\"_blank\" rel=\"noopener\"><strong>p\u00e1gina de integraci\u00f3n de Kontainer<\/strong><\/a> para saber m\u00e1s sobre los casos de uso, las ventajas, etc.<br \/>\nEl SSO incluye, entre otros, <a href=\"https:\/\/kontainer.com\/es\/integrations\/entraid\" target=\"_blank\" rel=\"noopener\">Azure\/Entra ID<\/a>, <a href=\"https:\/\/kontainer.com\/es\/integrations\/okta\" target=\"_blank\" rel=\"noopener\">Okta SSO<\/a> y <a href=\"https:\/\/kontainer.com\/es\/integrations\/googlesso\" target=\"_blank\" rel=\"noopener\">Google SSO<\/a>.<\/p>\n<p>A continuaci\u00f3n te guiamos por la configuraci\u00f3n de una conexi\u00f3n SSO de Microsoft Entra ID con Kontainer:<\/p>\n<hr \/>\n<h2 class=\"p2\">Registro de la aplicaci\u00f3n en Azure\/Entra ID<\/h2>\n<h3 class=\"p2\"><em>Paso 1:<\/em> Crea un recurso<\/h3>\n<p class=\"p2\">En la p\u00e1gina de inicio de los servicios de Entra ID, haz clic en \u00ab<strong>Entra ID Active Directory<\/strong>\u00bb<\/p>\n<p><picture><source type=\"image\/webp\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-1.webp?v=1763368898\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-5344\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-1.png?v=1763368898\" alt=\"\" width=\"800\" \/><\/picture><\/p>\n<h3 class=\"p2\"><em>Paso 2: <\/em>Registra la aplicaci\u00f3n<\/h3>\n<p class=\"p2\">En el men\u00fa de la derecha, haz clic en \u00ab<strong>App registrations<\/strong>\u00bb<\/p>\n<p><picture><source type=\"image\/webp\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-2.webp?v=1763368898\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-5365\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-2.png?v=1763368898\" alt=\"\" width=\"300\" \/><\/picture><\/p>\n<h4 class=\"p2\">Nuevo registro<\/h4>\n<p class=\"p2\">Arriba, haz clic en \u00ab<strong>New registration<\/strong>\u00bb<\/p>\n<p><picture><source type=\"image\/webp\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-3.webp?v=1763368898\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-5363\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-3.png?v=1763368898\" alt=\"\" width=\"800\" \/><\/picture><\/p>\n<h4 class=\"p2\">Rellena los datos<\/h4>\n<ul>\n<li class=\"p2\"><strong>Name:<\/strong> Kontainer<\/li>\n<li class=\"p2\"><strong>Redirect URI:<\/strong> <a href=\"https:\/\/xxx.kontainer.com\/login\/entraid\">https:\/\/xxx.kontainer.com\/login\/entraid<\/a> (sustituye xxx por el ID de cliente de Kontainer)<\/li>\n<\/ul>\n<p><picture><source type=\"image\/webp\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-4.webp?v=1763368898\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-5361\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-4.png?v=1763368898\" alt=\"\" width=\"800\" \/><\/picture><\/p>\n<h3><em>Paso 3:<\/em> Autenticaci\u00f3n<\/h3>\n<p>Haz clic en \u00ab<strong>Authentication<\/strong>\u00bb y en \u00ab<strong>Redirect URI configuration<\/strong>\u00bb y rellena los datos:<\/p>\n<ul>\n<li><strong>Redirect URI:<\/strong> <a href=\"https:\/\/xxx.kontainer.com\/login\/azure\/xxx\">https:\/\/xxx.kontainer.com\/login\/azure\/xxx<\/a><\/li>\n<\/ul>\n<p>Haz clic en \u00ab<strong>Save<\/strong>\u00bb<\/p>\n<p>Haz clic en \u00ab<strong>Authentication<\/strong>\u00bb y en \u00ab<strong>Settings<\/strong>\u00bb y rellena los datos:<\/p>\n<ul>\n<li><strong>Logout URL:<\/strong> <a href=\"https:\/\/xxx.kontainer.com\/logout\">https:\/\/xxx.kontainer.com\/logout<\/a><\/li>\n<\/ul>\n<p>Marca las casillas:<\/p>\n<ul>\n<li>\u00ab<strong>ID tokens<\/strong>\u00bb<\/li>\n<\/ul>\n<p>Haz clic en \u00ab<strong>Save<\/strong>\u00bb<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-7889\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Redirect-1024x518.png?v=1791206910\" alt=\"\" width=\"820\" height=\"415\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Redirect-1024x518.png?v=1791206910 1024w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Redirect-300x152.png?v=1791206910 300w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Redirect-768x388.png?v=1791206910 768w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Redirect-1536x776.png?v=1791206910 1536w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Redirect-2048x1035.png?v=1791206910 2048w\" sizes=\"auto, (max-width: 820px) 100vw, 820px\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-7885\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Logout-1024x456.png?v=1791206873\" alt=\"\" width=\"820\" height=\"365\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Logout-1024x456.png?v=1791206873 1024w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Logout-300x134.png?v=1791206873 300w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Logout-768x342.png?v=1791206874 768w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Logout-1536x685.png?v=1791206874 1536w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2023\/10\/Logout-2048x913.png?v=1791206874 2048w\" sizes=\"auto, (max-width: 820px) 100vw, 820px\" \/><\/p>\n<h3><em>Paso 4: <\/em>Certificado y secreto<\/h3>\n<p class=\"p1\">Haz clic en \u00ab<strong>Certificates and secrets<\/strong>\u00bb y despu\u00e9s en \u00ab<strong>New client secret<\/strong>\u00bb.<\/p>\n<p class=\"p1\">Rellena:<\/p>\n<ul>\n<li class=\"p1\"><strong>Description:<\/strong> Kontainer<\/li>\n<\/ul>\n<p class=\"p1\">Define \u00ab<strong>Expires<\/strong>\u00bb como \u00ab<strong>720 days<\/strong>\u00bb<\/p>\n<p class=\"p1\"><strong>NOTA:<\/strong> anota el secreto.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-7881\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2026\/10\/Secret-1024x654.png?v=1791206765\" alt=\"\" width=\"820\" height=\"524\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2026\/10\/Secret-1024x654.png?v=1791206765 1024w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2026\/10\/Secret-300x192.png?v=1791206765 300w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2026\/10\/Secret-768x491.png?v=1791206765 768w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2026\/10\/Secret-1536x981.png?v=1791206765 1536w, https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2026\/10\/Secret-2048x1308.png?v=1791206766 2048w\" sizes=\"auto, (max-width: 820px) 100vw, 820px\" \/><\/p>\n<h3><em>Paso 5:<\/em> Configuraci\u00f3n de tokens<\/h3>\n<p class=\"p1\">Haz clic en \u00ab<strong>Token configuration<\/strong>\u00bb y despu\u00e9s en \u00ab<strong>Add optional claim<\/strong>\u00bb.<\/p>\n<p class=\"p1\">Elige \u00ab<strong>ID<\/strong>\u00bb y marca:<\/p>\n<ul>\n<li class=\"p1\">\u00ab<strong>email<\/strong>\u00bb<\/li>\n<li class=\"p1\">\u00ab<strong>upn<\/strong>\u00bb<\/li>\n<\/ul>\n<p class=\"p1\">Haz clic en \u00ab<strong>Add<\/strong>\u00bb.<\/p>\n<p><picture><source type=\"image\/webp\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-7.webp?v=1763368898\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-5355\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-7.png?v=1763368898\" alt=\"\" width=\"800\" \/><\/picture><\/p>\n<h3><em>Paso 6:<\/em> Edita la reclamaci\u00f3n de grupos<\/h3>\n<p>Haz clic en \u00ab<strong>Add groups claim<\/strong>\u00bb y marca:<\/p>\n<ul>\n<li>\u00ab<strong>Security groups<\/strong>\u00bb<\/li>\n<li>\u00ab<strong>ID<\/strong>\u00bb<\/li>\n<\/ul>\n<p>Y despu\u00e9s marca:<\/p>\n<ul>\n<li>\u00ab<strong>Group ID<\/strong>\u00bb<\/li>\n<\/ul>\n<p><picture><source type=\"image\/webp\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-8.webp?v=1763368898\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-5353\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-8.png?v=1763368898\" alt=\"\" width=\"400\" \/><\/picture><\/p>\n<h3><em>Paso 7: <\/em>Permisos de la API<\/h3>\n<p class=\"p1\">Ve a \u00ab<strong>API permissions<\/strong>\u00bb y haz clic en \u00ab<strong>Add a permission<\/strong>\u00bb.<\/p>\n<p class=\"p1\">Elige \u00ab<strong>Microsoft Graph<\/strong>\u00bb y haz clic en \u00ab<strong>Delegated permissions<\/strong>\u00bb<\/p>\n<p><picture><source type=\"image\/webp\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-9.webp?v=1763368898\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-5351\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-9.png?v=1763368898\" alt=\"\" width=\"600\" \/><\/picture><\/p>\n<h4>Permisos de OpenID<\/h4>\n<p>Baja hasta los permisos de OpenID y marca <strong>\u00abemail\u00bb<\/strong> y <strong>\u00abprofile\u00bb<\/strong><\/p>\n<p><picture><source type=\"image\/webp\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/09\/Entra-ID-App-Registration1.webp?v=1763368898\"><img decoding=\"async\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/09\/Entra-ID-App-Registration1.jpeg?v=1763368898\" \/><\/picture><\/p>\n<h4>Permisos de aplicaci\u00f3n<\/h4>\n<p>Baja hasta \u00abApplication\u00bb y marca <strong>\u00abApplication.Read.All\u00bb<\/strong><\/p>\n<p><picture><source type=\"image\/webp\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2026\/01\/Screenshot-2026-01-15-at-07.52.16.webp?v=1768459998\"><img loading=\"lazy\" decoding=\"async\" class=\"\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2026\/01\/Screenshot-2026-01-15-at-07.52.16.png?v=1768459998\" width=\"686\" height=\"184\" \/><\/picture><\/p>\n<h4>GroupMember<\/h4>\n<p class=\"p1\">Baja hasta \u00ab<strong>GroupMember<\/strong>\u00bb y marca:<\/p>\n<ul>\n<li class=\"p1\">\u00ab<strong>GroupMember.Read.All<\/strong>\u00bb<\/li>\n<\/ul>\n<p><picture><source type=\"image\/webp\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-10.webp?v=1763368898\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-5349\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/04\/Entra-ID_img-10.png?v=1763368898\" alt=\"\" width=\"600\" \/><\/picture><\/p>\n<h3><em>Paso 8: <\/em>Comprueba los permisos<\/h3>\n<p class=\"p1\">Los permisos deber\u00edan quedar como en la imagen de abajo.<\/p>\n<p class=\"p1\">Es posible que necesites a un administrador para dar su consentimiento a los permisos.<\/p>\n<p><picture><source type=\"image\/webp\" srcset=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/09\/permissions-Entra-ID-App-Registration1.webp?v=1763368898\"><img decoding=\"async\" src=\"https:\/\/helpdesk.kontainer.com\/wp-content\/uploads\/2025\/09\/permissions-Entra-ID-App-Registration1.jpeg?v=1763368898\" \/><\/picture><\/p>\n<h3><em>Paso 9: <\/em>Env\u00eda los datos al soporte de Kontainer<\/h3>\n<p class=\"p1\">Ve a \u00ab<strong>Overview<\/strong>\u00bb, donde encontrar\u00e1s los datos de abajo, y env\u00edalos a tu contacto de Kontainer o a <a href=\"mailto:support@kontainer.com\">support@kontainer.com<\/a>:<\/p>\n<ul>\n<li class=\"p1\">\u00ab<strong>Application (client) ID<\/strong>\u00bb<\/li>\n<li class=\"p1\">\u00ab<strong>Directory (tenant) ID<\/strong>\u00bb<\/li>\n<\/ul>\n<p><strong>NOTA:<\/strong> env\u00eda el secreto guardado de forma segura.<\/p>\n<hr \/>\n","protected":false},"excerpt":{"rendered":"<p>Configura el inicio de sesi\u00f3n \u00fanico (SSO) en Kontainer para ofrecer una experiencia segura y fluida a tus usuarios internos, con una gu\u00eda paso a paso para Microsoft Entra ID.<\/p>\n","protected":false},"author":16,"featured_media":0,"menu_order":0,"comment_status":"","ping_status":"closed","template":"","article-category":[208,211,214],"article-tag":[216,219,220,222],"class_list":["post-8438","article","type-article","status-publish","hentry","article-category-ajustes-de-administracion","article-category-integraciones-y-plugins","article-category-usuarios-grupos-y-permisos","article-tag-solo-para-administradores","article-tag-pim","article-tag-planes-premium","article-tag-dam"],"translations":{"da":{"id":7992,"title":"Opret en SSO-forbindelse","url":"https:\/\/helpdesk.kontainer.com\/da\/article\/opret-en-sso-forbindelse\/"},"de":{"id":6836,"title":"SSO (Single-Sign-On) Anbindung einrichten","url":"https:\/\/helpdesk.kontainer.com\/de\/article\/sso-single-sign-on-anbindung-einrichten\/"},"en":{"id":5343,"title":"Establishing an SSO connection","url":"https:\/\/helpdesk.kontainer.com\/article\/establish-an-sso-connection\/"},"es":{"id":8438,"title":"Establecer una conexi\u00f3n SSO","url":"https:\/\/helpdesk.kontainer.com\/es\/article\/establecer-una-conexion-sso\/"},"fr":{"id":8257,"title":"\u00c9tablir une connexion SSO","url":"https:\/\/helpdesk.kontainer.com\/fr\/article\/etablir-une-connexion-sso\/"},"nl":{"id":8028,"title":"Een SSO-verbinding opzetten","url":"https:\/\/helpdesk.kontainer.com\/nl\/article\/een-sso-verbinding-opzetten\/"},"sv":{"id":7824,"title":"Uppr\u00e4tta en SSO-anslutning","url":"https:\/\/helpdesk.kontainer.com\/sv\/article\/uppratta-en-sso-anslutning\/"}},"_links":{"self":[{"href":"https:\/\/helpdesk.kontainer.com\/es\/wp-json\/wp\/v2\/article\/8438","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/helpdesk.kontainer.com\/es\/wp-json\/wp\/v2\/article"}],"about":[{"href":"https:\/\/helpdesk.kontainer.com\/es\/wp-json\/wp\/v2\/types\/article"}],"author":[{"embeddable":true,"href":"https:\/\/helpdesk.kontainer.com\/es\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/helpdesk.kontainer.com\/es\/wp-json\/wp\/v2\/comments?post=8438"}],"version-history":[{"count":0,"href":"https:\/\/helpdesk.kontainer.com\/es\/wp-json\/wp\/v2\/article\/8438\/revisions"}],"wp:attachment":[{"href":"https:\/\/helpdesk.kontainer.com\/es\/wp-json\/wp\/v2\/media?parent=8438"}],"wp:term":[{"taxonomy":"article-category","embeddable":true,"href":"https:\/\/helpdesk.kontainer.com\/es\/wp-json\/wp\/v2\/article-category?post=8438"},{"taxonomy":"article-tag","embeddable":true,"href":"https:\/\/helpdesk.kontainer.com\/es\/wp-json\/wp\/v2\/article-tag?post=8438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}