SAML2

Authentication flows

Introduction

There are three different ways users of Exivity can be authenticated. The default method is local authentication which uses local users managed through Exivity (either via the GUI or API). More options are available by navigating to Settings > System > Single Sign-On:

SAML authentication

Users logging in with our SAML SSO integration use an external SAML Identity Provider (IdP) to authenticate users. User attributes, usergroup and account access can be provisioned with user properties from the SAML SSO response.

SAML2 single sign-on integration is possible for the following Identity Providers:

1. Azure AD
2. OneLogin
3. Okta
4. Auth0