SAML integration

Exoprise supports the Security Assertion Markup Language (SAML) 2.0 integration to enable single sign-on (SSO) for user access.

  • SAML integration is optional. If you don't want to leverage SAML, you can continue using Exoprise-managed accounts.

  • If you use Microsoft Entra ID for single sign-on integration, and there is an outage related to Azure AD, you won't be able to sign in to Exoprise with a federated account to diagnose a Microsoft 365 issue.

  • Multiple configurations per tenant/organization are supported. This is great for migrating to different Identity Providers (IdPs) or supporting different automated provisioning scenarios.

  • On-demand provisioning using SAML 2.0 assertions is supported. Alternatively, you can require an invitation for access, and the invitations and Exoprise roles are managed the same way as regular (managed) invites.

  • Organization owners maintain their managed Exoprise credentials and continue to sign in with them for troubleshooting SAML configurations.

Configuration

SAML configurations can be accessed by any organization Admin via the Admin > Settings > SAML Setup page. From there, you can create and remove different SAML configurations for different IdPs.

Fore more information about creating SAML configurations within Exoprise, refer to CloudReady Single Sign-On SAML Integration.