Settings and activity
1 result found
-
722 votes
Thanks for your feedback on Single Sign-On(SSO). We last updated this idea in October 2025, and we’re sorry it’s taken some time for us to provide another. We will do our best to keep you more informed of progress as it continues.
Where SSO is today
We’ve built an SSO capability for accountant and bookkeeper partner practices using OpenID Connect (OIDC). We ran a closed beta with a small group of partners, which is now complete, and those partners are connected. We’re still confirming how and when other accounting and bookkeeping partners can access it. SSO isn’t currently available to businesses or IT providers. We’ll share access details in a future update once they’re confirmed.
What we’re looking at next
We’re exploring what it would take to offer SSO to small businesses. Business needs differ from accountant and bookkeeper partners’, so we’re looking at:
- how a business and its users…
An error occurred while saving the comment An error occurred while saving the comment 
Ian Lazzari
commented
I originally commented on this several years ago (now since purged!)
This will end up being a tragic own goal for your business.
Can I just ask if your admins/developers have access to databases without using SSO? Even if using your clunky MFA protection, you are one Phish and MFA bypass away from a massive data breach which will have a disastrous impact financially, but more importantly, to the ebbing reputation of your brand. Sack your Product Manager and Information Security team and get a grip of this!An error occurred while saving the comment Ian Lazzari
commented
Unbelievable. The relative ease to implement and the criticality of the functionality means, at the very least, there should be a date planned for this. Should really have been in place for years now though. It's nothing new!
An error occurred while saving the comment Ian Lazzari
commented
This is the only SaaS product in use by our business that doesn't support SAML authentication. We have even added it to our own offering and I'm quite sure our resources are a lot less than yours!
You don't even have to choose a specific IDP such as Azure. The vast majority would be covered once you support SAML.Ian Lazzari
supported this idea
·
Too little, FAR too late. We have moved away from Xero.
I it’s on one of the original threads about 4 years ago.
Xero was the last of our critical applications to even consider Entra integration. It made us think, with this attitude towards a core security function, what is happening with our data in the background, eg encryption, key management, access controls, secure coding etc.
We had no other choice but move to an alternative vendor.