Skip to content
← Share and support customer ideas for Xero

Settings and activity

1 result found

  1. Login - Enable Microsoft Entra ID Single Sign On

    722 votes

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    287 comments  ·  Users & setup » Login  ·  Admin →
    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback
    Signed in as (Sign out)
    Close
    Close
    In development  ·  AdminKelly Munro (Community Manager, Xero) responded

    Thanks for your feedback on Single Sign-On(SSO). We last updated this idea in October 2025, and we’re sorry it’s taken some time for us to provide another. We will do our best to keep you more informed of progress as it continues.

    Where SSO is today

    We’ve built an SSO capability for accountant and bookkeeper partner practices using OpenID Connect (OIDC). We ran a closed beta with a small group of partners, which is now complete, and those partners are connected. We’re still confirming how and when other accounting and bookkeeping partners can access it. SSO isn’t currently available to businesses or IT providers. We’ll share access details in a future update once they’re confirmed.

    What we’re looking at next

    We’re exploring what it would take to offer SSO to small businesses. Business needs differ from accountant and bookkeeper partners’, so we’re looking at:

    • how a business and its users…
    An error occurred while saving the comment
    Lauren Child commented  · 

    Can we get onto the trial please?

    An error occurred while saving the comment
    Lauren Child commented  · 

    Just to be clear, it's not just about the ease of login. At the moment Xero doesn't provide a method of enforcing MFA or adding security monitoring & control on the login.

    That makes it a liability, for example a user without MFA is potentially a regulatory breach and potential lawsuit, aside from the obvious security and privacy impact. Being divorced from the enterprise means it's not being monitored the same way.

    In short if a user falls victim to phishing and a hacker gets caught and blocked automatically in the enterprise, they still potentially get full access to Xero accounts until somebody pops over and resets the account manually, and who knows what personal & financial data access and damage they could do in the interim

    That's why we need SAML or Azure SSO etc.

    Ease of use is a bonus, but really it's all about de-risking the use of Xero in a normal enterprise.

    An error occurred while saving the comment
    Lauren Child commented  · 

    This idea is on here three times - search for SSO.

    Lauren Child supported this idea  ·