Enter your idea

Hey Kelly - Any chance of a progress update? It's been a year since you promised to keep the thread updated and 13 years since this idea was first logged and it's been like tumbleweed!!

Thanks for the update, but after 13 years of requests this is disappointing. Xero is falling behind on what is now a baseline security control, not a nice feature.

Xero holds some of the most sensitive data a business has: bank feeds, payroll, supplier details and payment runs. Those are exactly what attackers target for invoice fraud and payment diversion. Without Entra ID SSO, businesses can't apply their Conditional Access policies, device compliance checks or central offboarding to Xero. That leaves a separate set of credentials sitting outside their security controls.

Cyber insurers and frameworks increasingly expect centralised identity and MFA across all business-critical systems, and Xero is often the gap we have to explain to clients.

After this long, a committed timeline is the minimum customers should expect. Could you share a target quarter, even an indicative one, and details of how Partners can join the pilot group?

Hi Kelly
Any updates as it is 12 months on now ? We are looking at changing systems should this not be available soon

They just rolled out a new login experience for Xero users. Could it be that this was a precursor activity before we might see SSO coming to Business logins?

https://central.xero.com/0/article/Log-into-Xero

Happy 13th Birthday Entra SSO Sign-in Idea. Welcome to your teens.
One of Xero's oldest and most voted requests. 13 years today and still going!

@Greg thanks for your comment, I had a quick look and you are correct this is a very poorly worded article and it appears the feature is not available to Businesses just practices. They have implemented this and missed the Enter key and accidentally hit the facepalm button, but hey it's progress.

The snail doesn't always win the race though Xero.

Don't get too excited. The article mentioned by @James Lewis seems to be for accounting practices and not end user businesses.... If that's you then congratulations. That said it's a move in the right direction.
The article will come up in the chat bot if you ask about SSO.
https://central.xero.com/0/article/Single-sign-on-for-Xero

Is there an update on where you are at with this.

I noticed a new unlisted support article pop up that suggests that SSO for Xero is on the horizon. Would be great to get an update of when we can expect this: https://central.xero.com/0/article/Single-sign-on-for-Xero

I was surprised to find no SSO option for Xero with M365 because I thought it'd be a given nowadays...But disappointingly, unsurprised, to read some comments below AND no dev or responses to feedback. Cyber security improvements - yeah nah?

Whats going on Xero?

Enabling one touch MFA for login process (similar to the ATO agent portal) instead of asking for codes to be entered each time (This is frustrating).

Imagine launching Ultra without fixing this. Which customers need ERP yet pay so little attention to such basic controls when evaluating it?

Consider this as a data point: I am moving to QBO on Sept 1, 2026 if there is not clear indication and prioritization from the product team. I’ll be back to post about this on this date, as it seems almost certain Xero will continue to prioritize shiny objects over user security. It’s embarrassing that you haven’t built this capability which is frankly, really not that hard to do. You don’t even need to build a connector with Entra or Okta, just a page to generate SAML metadata and support self service federation setup. That’s Claude code max + a week of adult supervision + regression testing.

Xero - if you read this - email me at James@apivant.io and I will have my team build the connectors for Okta and Entra for you. I’m not joking. You just have to do the self service SSO set up and metadata exchange piece. I’d be happy to help you build this foundational feature which is a bare minimum for enterprise software.

Also - I strongly agree with Andrew’s point below - it’s a great idea to build out connectors for popular IDPs, but you must support SAML or OIDC generically.

James Bonifield
CEO & Founder, Apivant

I think it's unfair to criticise Xero here, it's only been asked for for 12 YEARS. Well, ok, actually a few more years than that, because there was another SSO idea on here before that which they said they wouldn't do and closed it. Clearly though Xero just had the foresight to see that soon AI was coming and some guy on his own would be able to replicate Xero with Claude Code in a few days, but with SSO, so what's the point of spending ages developing features when you should just milk what you have while you can? This will be my last comment on this issue, I think my 12-15 year journey of following progress on SSO at Xero is coming to an end and I'm going to try and unsubscribe from updates to this idea. So goodbye fellow SSO hopefuls. Maybe I'll check back in every decade or so to see how the feature is coming along. For those of you still waiting, perhaps just starting out on your Xero SSO journey, I wish you well, and godspeed. Think of the future years you wait for this feature as a type of meditative contemplation, a time when you can consider the nature of hope and how it relates to a world in which some thing remain forever out of reach. You can come to learn the true acceptance of things as they are, and not as you wish them to be. In this case, that thing being logging into your flippin Xero account with SSO.

Can you ask JAX to implement it for you?

This is reaching a ridiculous point. Even some of our smaller products in our stack support Google and M365 SSO. Plus the need to constantly log back in every hour is REALLY a pain for users. SSO would at least make it a little smoother. Even better would be passkeys. This is all standard stuff - you aren't having to reinvent the wheel here.

Could we at least have an update on this please @kelly-munro ? How can this have been in development since October 2025? If that's the case then I'm seriously worried about Xero's technical capabilities to support our business needs going forward. This is not complicated - it's standard stuff for enterprise software to support.

The lack of OIDC + SCIM is becoming a real problem. Xero is becoming isolated from the rest of our ecosystem, it needs to be sorted.

Modern conditional access via entra is a basic requirement these days, it also guides which SAAS products are purchased by a large part of my customer base. I am shocked Xero doesn't support this yet.