Single Sign-On (SSO): orderability and requirements

Single Sign-On (SSO) is an increasingly common feature of web services and business tools that enables users to authenticate and log into a third-party service or web page, using the same login credentials as the other systems they already use.

SSO is a particularly popular feature for enterprise customers, but it can also offer benefits to smaller and medium sized customers. The main benefits are:

  • Convenience and security: the ability to securely log into multiple tools with the same login credentials.
  • Reduced tech support costs and greater efficiency with only one password to remember.
  • Faster, simpler user administration.

Supported services

The following SSO SAML 2.0 providers are supported by the Pexip Service:

  • Google Workspace
  • Microsoft Entra ID (formerly called Azure AD)
  • Okta
  • PingFederate
  • Shibboleth
  • ADFS

As Pexip uses SAML 2.0 technology, a widely-used standard industry protocol, there is the potential for integrating with other SAML 2.0 identity providers. If you have a potential enterprise customer of a large enough value, and they request an integration with a SAML 2.0 provider that is not currently supported, it's possible that our products team can look at prioritizing the testing of the relevant platform.

Ordering SSO

To offer SSO to your customers — both new and existing — you simply order the service through Pexip and we'll take care of the technical set up.

  1. SSO is not visible in the Partner Portal, so you need to raise a ticket with our support team to initiate the process. Select the ticket type as Single Sign-on (SSO) Setup Request.

  2. Complete the form, including the SSO information supplied by your customer:

    • Login URL (SSO URL in the Pexip SSO Setup Request form).
    • Provider Identifier (Entity ID in the Pexip SSO Setup Request form).
    • The certificate downloaded from the provider.

    This provides us with the necessary technical information from the customer so that we can integrate their service correctly.

Note that there is no synchronization with the SSO service. It supports sign-in only; company administrators still need to initiate user invitations.

Configuration tasks for company administrators

See these articles for the specific configuration details that must be performed by your customer's IT administrator: