Login - Enable Microsoft Entra ID Single Sign On
Ability to use Azure Active Directory for MFA.
Purpose: It makes Microsoft users easily log into Xero.
Hi everyone, we appreciate all the feedback and votes on this idea. We know using Microsoft Entra ID SSO is now common practice for some businesses and being able to access Xero via a native integration with Entra ID would streamline how your teams log in and get set up in Xero, as well as help in managing access for larger teams and keeping things secure.
Our product team have been working with a small limited group of Partners to develop SSO capabilities. Though we can't give any definite timelines yet, we’ll keep this thread updated with news. Thanks
-
Allan Dall
commented
They just rolled out a new login experience for Xero users. Could it be that this was a precursor activity before we might see SSO coming to Business logins?
-
Greg Thomson
commented
Happy 13th Birthday Entra SSO Sign-in Idea. Welcome to your teens.
One of Xero's oldest and most voted requests. 13 years today and still going! -
Nathan Porter
commented
@Greg thanks for your comment, I had a quick look and you are correct this is a very poorly worded article and it appears the feature is not available to Businesses just practices. They have implemented this and missed the Enter key and accidentally hit the facepalm button, but hey it's progress.
The snail doesn't always win the race though Xero.
-
Greg Thomson
commented
Don't get too excited. The article mentioned by @James Lewis seems to be for accounting practices and not end user businesses.... If that's you then congratulations. That said it's a move in the right direction.
The article will come up in the chat bot if you ask about SSO.
https://central.xero.com/0/article/Single-sign-on-for-Xero -
Jon Drewett
commented
Is there an update on where you are at with this.
-
James Lewis
commented
I noticed a new unlisted support article pop up that suggests that SSO for Xero is on the horizon. Would be great to get an update of when we can expect this: https://central.xero.com/0/article/Single-sign-on-for-Xero
-
Josh Brown
commented
I was surprised to find no SSO option for Xero with M365 because I thought it'd be a given nowadays...But disappointingly, unsurprised, to read some comments below AND no dev or responses to feedback. Cyber security improvements - yeah nah?
-
Michael Parker
commented
Whats going on Xero?
-
Johnny Su
commented
Enabling one touch MFA for login process (similar to the ATO agent portal) instead of asking for codes to be entered each time (This is frustrating).
-
Joshua Street
commented
Imagine launching Ultra without fixing this. Which customers need ERP yet pay so little attention to such basic controls when evaluating it?
-
James Bonifield
commented
Consider this as a data point: I am moving to QBO on Sept 1, 2026 if there is not clear indication and prioritization from the product team. I’ll be back to post about this on this date, as it seems almost certain Xero will continue to prioritize shiny objects over user security. It’s embarrassing that you haven’t built this capability which is frankly, really not that hard to do. You don’t even need to build a connector with Entra or Okta, just a page to generate SAML metadata and support self service federation setup. That’s Claude code max + a week of adult supervision + regression testing.
Xero - if you read this - email me at James@apivant.io and I will have my team build the connectors for Okta and Entra for you. I’m not joking. You just have to do the self service SSO set up and metadata exchange piece. I’d be happy to help you build this foundational feature which is a bare minimum for enterprise software.
Also - I strongly agree with Andrew’s point below - it’s a great idea to build out connectors for popular IDPs, but you must support SAML or OIDC generically.
James Bonifield
CEO & Founder, Apivant -
Richard Crozier
commented
I think it's unfair to criticise Xero here, it's only been asked for for 12 YEARS. Well, ok, actually a few more years than that, because there was another SSO idea on here before that which they said they wouldn't do and closed it. Clearly though Xero just had the foresight to see that soon AI was coming and some guy on his own would be able to replicate Xero with Claude Code in a few days, but with SSO, so what's the point of spending ages developing features when you should just milk what you have while you can? This will be my last comment on this issue, I think my 12-15 year journey of following progress on SSO at Xero is coming to an end and I'm going to try and unsubscribe from updates to this idea. So goodbye fellow SSO hopefuls. Maybe I'll check back in every decade or so to see how the feature is coming along. For those of you still waiting, perhaps just starting out on your Xero SSO journey, I wish you well, and godspeed. Think of the future years you wait for this feature as a type of meditative contemplation, a time when you can consider the nature of hope and how it relates to a world in which some thing remain forever out of reach. You can come to learn the true acceptance of things as they are, and not as you wish them to be. In this case, that thing being logging into your flippin Xero account with SSO.
-
Nicholas Piasecki
commented
Can you ask JAX to implement it for you?
-
Mike Baptiste
commented
This is reaching a ridiculous point. Even some of our smaller products in our stack support Google and M365 SSO. Plus the need to constantly log back in every hour is REALLY a pain for users. SSO would at least make it a little smoother. Even better would be passkeys. This is all standard stuff - you aren't having to reinvent the wheel here.
-
Ben Jemison
commented
Could we at least have an update on this please @kelly-munro ? How can this have been in development since October 2025? If that's the case then I'm seriously worried about Xero's technical capabilities to support our business needs going forward. This is not complicated - it's standard stuff for enterprise software to support.
-
Chris Michalski
commented
The lack of OIDC + SCIM is becoming a real problem. Xero is becoming isolated from the rest of our ecosystem, it needs to be sorted.
-
Edward Raine
commented
Modern conditional access via entra is a basic requirement these days, it also guides which SAAS products are purchased by a large part of my customer base. I am shocked Xero doesn't support this yet.
-
Danial Saleem
commented
Really surprised to see this is still pending. SAML and SCIM for any SaaS is no brainer, and this must be implemented ASAP so we can leverage modern auth along with conditional access controls
-
Helen Gerling
commented
Come on Xero - this is ancient technology now. If you'd like some help to get it setup so that anyone can use any OAuth / SAML IdP (including Entra) for authenticating, just get in touch. We set this up for ISVs all the time. and as Xero users ourselves we have a vested interest in solving this.
-
Gavriel Ingram
commented
I'm beyond shocked that this hasn't already been implemented.
The date on this 'idea' is 13 years ago and has receive significant numbers of votes, and where is the progress?
The most recent Xero response (almost a year ago) is sadly weak and non-committal.
We have only just started with Xero, but browsing through this ideas forum is fairly depressing and we are beginning to think we've made the wrong move.