Single sign-on

Let your team sign in to 1Auth with your identity provider over SAML 2.0 or OpenID Connect.

Connected

Providers your team can sign in with today.

O Okta SAML 2.0Connected · enforced for 6 members Enabled

Pick the identity provider your company runs.

E Microsoft Entra ID SAML 2.0 · OIDCSign in with Microsoft Entra ID (formerly Azure AD).

G Google Workspace OIDCSign in with Google Workspace accounts.

1 OneLogin SAML 2.0Connect OneLogin as your identity provider.

S Custom SAML 2.0 SAML 2.0Any SAML 2.0 provider — Ping, Keycloak, JumpCloud and the rest.

ID Custom OIDC OpenID ConnectAny OpenID Connect provider with a discovery URL.

Paste these into your identity provider when you set up the SAML app.

Entity ID (Audience URI)

https://control.1auth.us/saml/northwind/metadata

Assertion Consumer Service (ACS) URL

https://control.1auth.us/saml/northwind/acs

Single Logout (SLO) URL

https://control.1auth.us/saml/northwind/slo

From your provider's SAML app. 1Auth uses these to verify sign-ins.

Sign-on URL

IdP Entity ID / Issuer

Name ID format

X.509 signing certificate

Paste the PEM certificate your provider issues for this app.

Enforce single sign-on

Require members with a verified-domain address to sign in through this provider.