---
updatedAt: 2026-09-30T20:00:54.000Z
agentTools:
projectIndex: https://developer.i-payout.com/llms.txt
---
# How to Implement Single Sign On (SSO)
The usual workflow for implementing Single Sign On (SSO) involves the following steps:
**[Step 1: Authenticate](#step-1-authenticate)**: Obtain an API token by validating your credentials.
**[Step 2: Get SSO Token](#step-2-get-sso-token)**: Generate an SSO token for the user.
**[Step 3: Redirect to eWallet](#step-3-redirect-to-ewallet)**: Redirect the user to the eWallet with the SSO token.
## API Endpoints Used
In this guide, you will use the following API endpoint:
{`
`}
Below, you will go through the necessary steps to implement SSO between i-payout's eWallet and your website.
## Step 1: Authenticate
To start using i-payout solutions, you will need to authenticate with your API Token. Refer to the [Get a Token](https://developer.i-payout.com/docs/get-a-token) guide to learn how to:
{`
`}
## Step 2: Get SSO Token
Once authenticated, call the [Get SSO Token](https://developer.i-payout.com/reference/get-sso-token) endpoint to generate an SSO token for the user. This token is valid for ten minutes and will be used to seamlessly log the user into the eWallet system. Below, you will find an example request and response for getting the SSO token:
```curl Request
curl --request GET \
--url https://merchantapi.testewallet.com/api/v1/beneficiaries//sso-token \
--header 'accept: application/json' \
--header 'content-type: application/json'
```
```json Response
{
"isSuccess": true,
"message": "Token generated successfully",
"statusCode": 0,
"logIdentifier": "abc123",
"data": {
"token": "ssoToken123",
"expireInMinutes": 10
}
}
```
## Step 3: Redirect User to eWallet
After obtaining the SSO token, redirect the user to the eWallet using the token. The user will be logged in automatically without needing to re-enter their credentials.
**Example Redirect URL:**
```
https://yourdomain.com/MemberLogin.aspx?secKey={ssoToken}
```
Replace `https://yourdomain.com` with your i-payout eWallet domain and `{ssoToken}` with the token you retrieved in [Step 2](#step-2-get-sso-token). The token is passed in the `secKey` query parameter.