Enter your idea

Still can't believe how utterly pathetic Xero is for this. Every other major vendor can do this why is Xero so utterly inept and insists on insecure methods of authentication.
Xero is the biggest vulnerability in our organisation because it's the only system that doesn't have SSO.

@Chris Okta's SWA is a browser plugin solution that performs credential stuffing into login forms.

While it would permit for using Okta as a launching point, it does not provide the same level of capabilities and (I would argue) security that a native OIDC/SAML solution would provide.

Having support for OIDC and SAML 2 is very important, to enable conditional access. Having onboard and off-boarding would be great as well

Eureka?

Potential game-changer moment for Xero user cyber security.

Okta (starter licence) SWA provides SSO functionality for apps that don't.

Still trialing it but I hope it's the solution we've all been trying to find for such a long long time.

Good luck community.

Still waiting for Xero to take security seriously in 2025.

As an Identity Security consulting services company, and a 10+ year user of Xero accounting software across multiple countries, we have been eagerly awaiting an announcement from Xero to address this most basic requirement, that seemingly most other SaaS vendors already offer. We have tried to build our own, but due to limitations in the product, were unable to achieve a viable SSO solution. However, what we were able to build is an automated provisioning/de-provisioning tool from Xero Payroll to on-prem AD or Entra ID. If anyone is interested in this capability, here is a link to more information. https://assertiv.com/hr2entra/

Hi Xero, is it possible to get an update to this from your development/engineering team?

Cant wait to find something that has Xero's features so I can migrate off this shocking insecure platform. What a joke in 2025 with all the breaches, that something that costs so little to build would be dragged along for so long...

Pathetic.

It is unbelievable that this remains unavailable and @xero has not provided an update in over a year. It would simplify user administration and stop exposing businesses to weaknesses that can be addressed.

Surely this has to be a standard offering in cloud platforms considering the security improvements it would bring. What's there still to think about?

This request has been hanging in for so long that it talks about Azure Active Directory instead of Entra ID.

Come on Xero, it's time to get serious about security and enterprise integration.

@Xero how many votes and comments does a ticket need to get picked up?! It's becoming insulting now.

I'm amazed that something I take for granted on pretty much every SaaS platform is missing from Xero with no commitment to actually do anything. When we evaluate new platforms SSO is one of the key criteria we measure against.

A timeline or roadmap is needed Xero.

Here is the linkedin for Security (CISO) at Xero, I wonder how high this topic sits on her priority list....

https://www.linkedin.com/in/suzy-clarke-46a3624/

It is a joke that this still has not been implemented with no response from Xero for over a year now. SSO is literally an industry standard now. If their dev team is this incompentent, then I would quickly begin questioning how robust is Xero's security given the highly sensitive data their systems hold. I feel that unless this starts to affect their revenue stream, they will continue to ignore these requests. Our company will start to look into alternative providers on our next renewal. Do yourself a favour, if you are a potential customer for Xero and are reading this, look elsewhere.

PLEASE ALLOW THIS !!!! we have staff members logging into our system from home and cannot prevent it.

Also take a look at what Stripe did in their SSO implementation to handle advisors with multiple clients/organizations, role assignments via attribute mappings, and their EXCELLENT testing and troubleshooting tools that ensure the SSO configuration is working.

Please add Okta to the list of IdPs that should be supported when SAML SSO is added to Xero.

If Xero were committed to keeping their customers most critical data safe and secure, and making administration of user access as streamlined as possible, they would implement Azure SAML. Get on with it.

It suprises me that there hasnt been any word from Xero on this. Doesnt seem like they are "staying close to votes and feedback of the idea here". Xero, please confirm this thread is being monitored at all and what the plan is here!