Login - Enable Microsoft Entra ID Single Sign On
Ability to use Azure Active Directory for MFA.
Purpose: It makes Microsoft users easily log into Xero.
Hi everyone, we appreciate all the feedback and votes on this idea. We know using Microsoft Entra ID SSO is now common practice for some businesses and being able to access Xero via a native integration with Entra ID would streamline how your teams log in and get set up in Xero, as well as help in managing access for larger teams and keeping things secure.
Our product team have been working with a small limited group of Partners to develop SSO capabilities. Though we can't give any definite timelines yet, we’ll keep this thread updated with news. Thanks
-
Kristian Zembic
commented
It is a joke that this still has not been implemented with no response from Xero for over a year now. SSO is literally an industry standard now. If their dev team is this incompentent, then I would quickly begin questioning how robust is Xero's security given the highly sensitive data their systems hold. I feel that unless this starts to affect their revenue stream, they will continue to ignore these requests. Our company will start to look into alternative providers on our next renewal. Do yourself a favour, if you are a potential customer for Xero and are reading this, look elsewhere.
-
Jimmy Tang
commented
PLEASE ALLOW THIS !!!! we have staff members logging into our system from home and cannot prevent it.
-
Andrew Anderson
commented
Also take a look at what Stripe did in their SSO implementation to handle advisors with multiple clients/organizations, role assignments via attribute mappings, and their EXCELLENT testing and troubleshooting tools that ensure the SSO configuration is working.
-
John Crane
commented
Please add Okta to the list of IdPs that should be supported when SAML SSO is added to Xero.
-
Jodie Rugless
commented
If Xero were committed to keeping their customers most critical data safe and secure, and making administration of user access as streamlined as possible, they would implement Azure SAML. Get on with it.
-
Amy Jobson
commented
It suprises me that there hasnt been any word from Xero on this. Doesnt seem like they are "staying close to votes and feedback of the idea here". Xero, please confirm this thread is being monitored at all and what the plan is here!
-
Nathan Porter
commented
Unfortunately, Xero is one of the weak links in our application stack when it comes to security.
-
Dan Simpson
commented
Shocking that Xero do not support Azure SAML. This is not helping businesses at keep their most critical data safe and secure, making administration of user access that much more difficult!
-
Andrew Anderson
commented
Please add Okta to the list of IdPs that should be supported when SAML SSO is added to Xero.
-
Matt Gifford
commented
I think we need a commitment that it's in development at least, it's been 12+ years since this was initially suggested.
It's somewhat embarrassing for Xero at this point..
-
Guy Edelstyn
commented
Seriously, how is it 2025 and no SSO?! @Xero team please update!
-
Stuart Ellidge
commented
It's more than a year since the last post - can you give us an update?
-
Eric Hoy
commented
Looking at these docs... I'm surprised the ATO isn't enforcing you to get this type of Identity integration completed. It's mentioned in Essential8, CPS234, and other ASIC/APRA regulatory guidelines.
https://apiportal.ato.gov.au/api-products/oauth-dynamic-client-registration-api
https://www.ato.gov.au/api/public/content/d9bc7a79-1954-405f-b107-9154900768eb_ato_digital_strategy_2022_25_pdf -
Tasha Palmer
commented
This definitely needs to be made a priority. Our financials and payroll are the least secure.
-
Matthew Flanagan
commented
Stop putting prices up each year without implementing SSO. We need this to be secure. We don't need or want features like JAX.
-
Rupert Davey
commented
100% yes to this. Why is this not a thing... it's 2025!!!!
-
Michael Romano
commented
As a shareholder, I'm watching this closely. Not sure what the CISO is doing.
-
James Bonifield
commented
I am looking at moving off Xero, as it is ridiculous that SSO support is not provided, and as a provider of Identity & Access Management services it's sort of a deal breaker to use software that doesn't provide this fundamental security benefit.
By the way - as an enterprise software provider - you should be mindful of CISA's Secure By Design Framework and the myriad other frameworks that you are not in compliance with by not providing SSO (even behind a paywall, which is a separate conversation, but at least it's offered)
If you need help implementing shoot me an email - james@anthropicidentity.com I work in IAM and have implemented SSO many times. How easy it is to do this vs the impact it has on the maturity of your software makes me a little shocked you still don't have it in place
-
Joseph Kelly
commented
Will begin to look at alternative systems which allows SSO. Please review your commitment to this
-
Joseph Kelly
commented
Mind blowing that this isn’t a standard feature!