Login - Enable Windows Azure Active Directory Single Sign On
Ability to use Azure Active Directory for MFA.
Purpose: It makes Microsoft users easily log into Xero.
Hi community, we appreciate many businesses have adopted single sign on with providers like Google, Microsoft Azure/Entra, and Okta to easily streamline logins to many applications and manage operational risk. Our team are staying close to votes and feedback of the idea here, and though we can't commit to development at this time, we will be sure to let you know of any progress toward enabling single sign on
-
Michael Fowlie commented
This is such a standard and critical feature that virtually every SaaS offers. I don't understand why a company as big as Xero doesn't offer it.
-
Lionel Koblenz commented
Would really like Xero to support SAML provided by an external authenticator. It would make our systems so much more secure and manageable.
-
Luke Russell commented
+1 for Single Sign on.
SAML or Outh2 is close to table stakes really. This feature shouldn't be limited to just Entra either. Perhaps start with Entra, Google and Generic.
-
John Gilham commented
Add support for Microsoft Entra ID for SSO already!!!! Xero must hate their customers.
-
David Lane commented
Why is this not enabled - it's a security risk on our financial data!
It's not complicated i'm sure your developers could easily and quickly roll this out!
-
Robert Folbigg commented
It’s 2024, just get it done!
This is implemented in every major accounting platform and major ERP on the market. Without these controls in place it makes it hard for organisations that use Xero to achieve compliance against the essential 8, nist ect..
Get with the times guys your moving like a bunch of accountants 👍
-
David Long commented
The listed purpose of this idea, as above, is "It makes Microsoft users easily log into Xero". Yes, it does but that is not the main issue here. SSO allows Xero logons to be restricted to work provided secure devices only, via features like M365 conditional access. SSO also means that when a user is offboarded from an organization e.g. via M365 then their logon to Xero is automatically blocked. Without SSO there are potentially users in Xero who still have logons to Xero, but they should not have that access.
-
Angele Grone commented
I don't mind using the one-time password code. that seems to work fine.
-
Zoe Bethel commented
Very necessary
-
Jacinta Belz commented
Xero login is a little bit of a pain, SSO integration would make it alot better!
-
David Long commented
Head of technology is Diya Jolly. I just posted the following on her LinkedIn page under an AI announcement. "How about focusing on basic security instead of AI. Xero does not support Azure SSO which is a requested feature since 2013 on the Xero forums"
-
David Erikson commented
I'd like to see Google and AzureAD supported as identity providers. Okta and others would also likely be candidates.
This is pretty much expected functionality these days and may become a reason to move away from Xero if you don't support the functionality.
-
Michael Wood commented
Not valuing security is a weird hill to die on for cloud accounting software, make it make sense.
-
Timothy Bailey commented
We use Xero in our own business but wouldn't recommend it to larger business because of the overhead and security risks involved in having to setup and remove users as and when required. SSO would be a welcome addition.
-
Keith Fountain commented
Perhaps we should start hitting forums with this and start impacting uptake of new business, it's always the financial impact that gets things done.
-
Thomas Cusmano commented
Please implement this
-
Krupal Tandel commented
We'll see GTA VI before we see SSO on Xero.
-
Matthew Flanagan commented
Integration with identity providers is essential these days to let business control how they want their users to authenticate and ensure strong phishing resistant MFA can be enforced.
I run a cyber security business and it is embarrassing for Xero that this feature is yet to be implemented.
With the new financial year about to start I will be looking at other products for my accounting needs.
-
Tim Long commented
Xero is the last key product in our environment that is not secured in this way. This is a critical and urgent improvement in the product.
-
Matt Minus commented
This feature not being present on the Xero roadmaps are the reason we are holding off recommending Xero deployments for accounting practices. For practices with hardware key phishing resistant authentication and conditional access policies in place, Xero is REDUCING the security of these practices by requiring the use of their clunky MFA, requiring manual offboarding and not providing the enhanced logging that SSO integration provides