How to set up Single Sign-On (SSO) with SAML
Single Sign-On (SSO) via Security Assertion Markup Language (SAML) allows your organization to centralize user authentication. Integrating your Identity Provider (IdP) with expoze enables team members to securely log in using their existing corporate credentials without maintaining separate passwords.
Strategic value
Centralizing authentication through SAML SSO strengthens enterprise security, simplifies access control, and reduces administrative overhead. Administrators can grant or revoke access to expoze across the organization from a single Identity Provider dashboard.
Prerequisites
Before beginning configuration, ensure you have:
- Administrator access to your expoze account.
- Administrator access to your Identity Provider (such as Google Workspace, AWS, or Microsoft Entra ID / Azure).
How to set up SAML SSO
- Log into the expoze web application and navigate to Account settings.
-
Select the SSO tab to view your environment URLs.
In a separate browser tab, log into your SAML provider admin portal and initiate creating a new SAML application.
When your SAML provider requests application-specific details, copy the Login portal URL and ACS URL from your open expoze SSO settings tab.
Return to the expoze SSO tab and click Add SAML.Complete the modal fields using the values provided by your SAML provider:- App name: Enter a clear identifier for the application (for example,
Google Workspace SAML for expoze). - Entity ID: Enter the unique URL identifier provided by your SAML provider.
- SSO URL: Enter the Identity Provider SSO URL for SP-initiated authorization.
- Certificate: Paste the IdP certificate used to sign authentication messages.
- App name: Enter a clear identifier for the application (for example,
- Click Save to store your configuration.
- Share the generated Login portal URL under Account settings with your team to enable SSO sign-in.
💡Pro Tip
Keep at least one standard administrator account with direct login credentials active alongside your SSO integration. This guarantees uninterrupted access to your workspace if your Identity Provider undergoes maintenance or configuration updates.