About SAML SSO
SAML SSO is an open standard for securely authenticating users with a centralized identity provider. The identity provider can be any system that manages user accounts and supports the SAML standard, such as Okta or Microsoft Entra ID (formerly Azure Active Directory). With SAML SSO, you can configure Eon to trust the identity provider. This allows you to manage user access centrally and securely, without requiring manual work in Eon when people join or leave your company.
When SAML SSO is enabled in your Eon account, you’ll assign roles to user groups in Eon. You can then manage individual users’ access to Eon by adding or removing them from the user groups through the identity provider.
For a comparison of basic login and SAML SSO, see User management: Basic login vs. SAML SSO.
Eon doesn’t send notification emails to new users when you add them to the identity provider, so they might not know they can log in to Eon. When a user’s access level changes because you add or remove them from a SAML group, let them know.
SAML SSO access is managed through groups
When a SAML user logs in to Eon, Eon relies on the user’s group membership to determine their role. This means you’ll need to:
- Set your identity provider to send a user’s group claims to Eon.
- Configure SAML groups in Eon to match your identity provider’s groups.
If either of these configurations is missing, the user is unable to log in to Eon.
Choose your identity provider
For instructions, choose your identity provider. If you don’t see your identity provider, use the general instructions.