Skip to content
← Users & setup

Enter your idea

Users & setup: Login

Categories

Login - Enable Microsoft Entra ID Single Sign On

Ability to use Azure Active Directory for MFA.

Purpose: It makes Microsoft users easily log into Xero.

722 votes

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

AdminXero Team (Admin, Xero) shared this idea  ·   ·  Report…  ·  Admin →
How important is this to you?

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close
In development  ·  AdminKelly Munro (Community Manager, Xero) responded  · 

Thanks for your feedback on Single Sign-On(SSO). We last updated this idea in October 2025, and we’re sorry it’s taken some time for us to provide another. We will do our best to keep you more informed of progress as it continues.

Where SSO is today

We’ve built an SSO capability for accountant and bookkeeper partner practices using OpenID Connect (OIDC). We ran a closed beta with a small group of partners, which is now complete, and those partners are connected. We’re still confirming how and when other accounting and bookkeeping partners can access it. SSO isn’t currently available to businesses or IT providers. We’ll share access details in a future update once they’re confirmed.

What we’re looking at next

We’re exploring what it would take to offer SSO to small businesses. Business needs differ from accountant and bookkeeper partners’, so we’re looking at:

  • how a business and its users are set up in Xero
  • which businesses would qualify
  • how we’d check a company owns its email domain
  • how onboarding and support would work

Help us understand your needs

If you run or work in a small business, an accounting or bookkeeping practice, or are an IT provider, please take our short survey. It will give us a sense of how you sign in today, which identity provider you use (if any) and what you need from SSO. It takes about 5 minutes and closes Friday 11 December 2026.

We don’t have a timeline to share yet. We’ll share an update on the survey findings in the new year (2027).

Show previous admin responses (4)

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Richard Clegg commented  ·   ·  Report

    I concur with Adam.

    I work for an ISO 27001 consultancy, and Xero appears on many of our clients' risk registers for this.

    Given QuickBooks Online doesn't appear do this either, implementing it would give Xero a marketable USP in the small business space to pick up the SMB's that take cybersecurity seriously (which is a large chunk) and hoover up some of QB's market segment.

    I don't know if the reticence is the complexity of implementing it, or the expected time commitment to supporting users afterwards, but the demand for it isn't' going to go away ... and if Xero can't deliver, I can see some of our customers moving away to other solutions that do (and as a consultant, I can't blame them either).

  • Adam Blanken commented  ·   ·  Report

    Here we are, 11 years on with no traction.

    Xero is specifically highlighted in our cyber risk register due to its lack of integration with external identity providers.

  • Juan Olveira commented  ·   ·  Report

    For us, it is critical to have user integration.

  • IT Admin commented  ·   ·  Report

    Hey team, I think adding Single Sign-On (SSO) to Xero would be a fantastic enhancement for all of us. SSO allows users to access multiple applications with just one login, making our daily tasks smoother and reducing the hassle of remembering multiple passwords. Plus, it aligns with the National Cyber Security Centre (NCSC) guidelines for strong authentication methods, which means better security for our data.

    Many other products already offer SSO as a standard feature, so incorporating it into Xero would help keep the platform up to date with industry standards. It also supports compliance with schemes like Cyber Essentials, showing a commitment to best practices in cybersecurity. It would be great to see Xero take this step to protect its users and make our experience even better.

  • Lauren McMaster commented  ·   ·  Report

    Hi Kelly, I note in your reply you acknowledge the 'operational risk' that businesses are attempting to minimize. Not sure why Xero would want their product as part of the problem instead of part of the solution? I strongly agree with the request of other users that this is implemented.

  • Paul Harvey commented  ·   ·  Report

    Yes please prioritise this, this is an important step for many organisations security.

  • Brendan Tate commented  ·   ·  Report

    Critical for security in this day and age. please prioritise development

  • Mark Anyon commented  ·   ·  Report

    SIngle sign on capability with Microsoft Azure and/or Okta would certainly increase our security posture

  • Simon Pilot commented  ·   ·  Report

    The purpose needs to be changed from easily login to cybersecurity: "Successful and unsuccessful multi-factor authentication events are centrally logged". This is a security compliance issue.

    This is preventing my company achieving Australia's Essential 8 Cybersecurity Maturity levels above level 1

  • Keith Fountain commented  ·   ·  Report

    Interestingly, if you switch to ideas that are in progress, there are many that have far fewer votes than this post that are being worked on - how many votes do we need to get before you add this to your road map, or at least tell us why you are so reticent about implementation.

  • Shahiq Sarkar commented  ·   ·  Report

    It is sad to see that the response from Xero from 2014 has been the same, please upvote and we will look into it. Then come in development updates, sorry we have no roadmap for this. It is essential that we manage user accesses in larger organisations.

  • Kenneth Luu commented  ·   ·  Report

    It is highly unusual that an essential feature like this does not exist in 2024 when Xero was started in 2006. The SAML standard has been around longer than Xero has been a company. This is an essential quality-of-life and security visibility feature.

  • Gareth Hardman commented  ·   ·  Report

    SSO is not only desired, it is REQUIRED. We are no longer onboarding any new systems that do not afford single sign on, for all the reasons of security, access control and account management that have already been stated.

    Like others have mentioned, if we cannot have this level of security and account management on the Xero platform then we will be forced to look at alternatives that provide it.

    Being in the financial sector we are heavily and continually audited by external parties, and the main thing that gets brought up on every report is the lack of SSO security with Xero.

  • Simon Pilot commented  ·   ·  Report

    Single Sign On SSO with Microsoft Entra ID is required to restrict logins to compliant devices only. We don't allow BYOD access to Xero but we can't enforce this check without SSO sign in workflows. This represents an unacceptable risk to our business.

  • Iain Enticott commented  ·   ·  Report

    This is an absolute MUST, and XERO is on our risk register until this is released. This is not a feature but a standard requirement for SaaS applications today.

  • Michael Fowlie commented  ·   ·  Report

    This is such a standard and critical feature that virtually every SaaS offers. I don't understand why a company as big as Xero doesn't offer it.

  • Lionel Koblenz commented  ·   ·  Report

    Would really like Xero to support SAML provided by an external authenticator. It would make our systems so much more secure and manageable.

  • Luke Russell commented  ·   ·  Report

    +1 for Single Sign on.

    SAML or Outh2 is close to table stakes really. This feature shouldn't be limited to just Entra either. Perhaps start with Entra, Google and Generic.

1 2 … 7 9 11 … 14 15