Skip to main content

🔐 How to Set Up Single Sign-On (SSO)

Follow this step-by-step guide to configure SSO for your organization. You’ll learn how to connect your identity provider, verify settings, and enable secure, seamless access for your users.

S
Written by Sophie

NineID supports SAML 2.0 Single Sign-On (SSO), allowing users to log in with their organization’s identity provider (such as Azure AD, Okta, or any SAML-compatible provider) instead of using a separate username and password.

📍 Where to Find It

Go to:
​Configuration → Integrations → SAML SSO

✨ Key Features

  • Automatic User Provisioning
    New users can be automatically created the first time they log in via SSO.

  • Default Role Assignment
    Assign a default role to newly provisioned users.

  • Group-to-Role Mapping
    Map identity provider groups to NineID roles
    ​(Example: “Managers” group → “Site Manager” role).

  • Strict Roles Mode
    When enabled, user roles are fully synchronized from the identity provider at every login.

👤 How It Works for Users

Once SSO is configured, users will see a “Login with SSO” button on the NineID login page.

  1. Click Login with SSO

  2. Authenticate via your organization’s identity provider

  3. Return to NineID automatically logged in ✅

📋 Required Attributes from the Identity Provider

The following attributes must be provided:

  • firstName

  • lastName

  • email

  • phone (optional)

  • Groups (optional, required for role mapping)

⚙️ Identity Provider Configuration Details

The Integrations page provides the technical information required to configure your identity provider, including:

  • Entity ID

  • Callback (ACS) URLs

  • Additional SAML configuration details

Use these values in your identity provider’s admin console to complete the setup.

Did this answer your question?