Single sign-on (SAML)

SAML SSO lets users sign in with your existing identity provider instead of an Open Doors password. Available on Pro and Enterprise plans.

1. 1
   Open Settings → Security → SSO

   Click "Configure SAML."
2. 2
   Copy the ACS URL and Entity ID

   You will paste these into your IdP.
3. 3
   In your IdP, create a new SAML app

   Name it Open Doors. Paste the ACS URL and Entity ID from step 2.
4. 4
   Map attributes

   Required: email. Recommended: first_name, last_name.
5. 5
   Download the IdP metadata XML

   Or copy the SSO URL, certificate, and issuer separately.
6. 6
   Upload the metadata to Open Doors

   Paste the XML or fill each field. Click Test.
7. 7
   Enable

   Once the test succeeds, flip the toggle. Existing users are prompted to authenticate via SSO on next login.