Settings and activity
5 results found
-
726 votes
Thanks for your feedback on Single Sign-On(SSO). We last updated this idea in October 2025, and we’re sorry it’s taken some time for us to provide another. We will do our best to keep you more informed of progress as it continues.
Where SSO is today
We’ve built an SSO capability for accountant and bookkeeper partner practices using OpenID Connect (OIDC). We ran a closed beta with a small group of partners, which is now complete, and those partners are connected. We’re still confirming how and when other accounting and bookkeeping partners can access it. SSO isn’t currently available to businesses or IT providers. We’ll share access details in a future update once they’re confirmed.
What we’re looking at next
We’re exploring what it would take to offer SSO to small businesses. Business needs differ from accountant and bookkeeper partners’, so we’re looking at:
- how a business and its users…
John Crane
supported this idea
·
An error occurred while saving the comment -
197 votes
Thanks team, we really appreciate you describing your needs in allowing staff to raise and manage purchase orders without opening up supplier bills and broader financial information.
Right now, we’re developing a dedicated Purchase Orders Only role, that'll give you more granular controls for purchase orders - You'll be able to give your users access while keeping access to your bills separate.
Your feedback here has ben valued in helping us evolve our permissions in the product.
I'll come back to share once these changes are live. 😁
John Crane
supported this idea
·
-
102 votes
Hi team, we've just launched passkeys to our first group of users. From this week, Xero Me app users who haven't set up MFA yet will be able to use passkeys to log into Xero. Next, we'll be progressively rolling this out to more users over the coming months. We look forward to and welcome your feedback here. As we have more news on the rollout I'll share with you on this idea.
John Crane
supported this idea
·
-
519 votes
Hey everyone, thank you for all your feedback. We’re on a long journey to provide more granular access and controls within Xero features that our customers need.
As you may have seen in some of our recent updates across other user roles ideas we’re currently in the process of adding more permissions within Reporting and Inventory. Further to this our research has highlighted Payroll and Banking as areas that more controls are most needed, and are on our agenda as we continue to develop permissions and access to features.
Your feedback here and through direct engagements with our teams have been extremely insightful, and we appreciate all your inputs.
I'll continue to provide updates on the development of roles for features as we progress.
John Crane
supported this idea
·
-
79 votes
Thanks for your recent comments, and for continuing to support this idea, everyone. We appreciate the passion here, and I’m sorry it’s taken a while to return with another update.
Since our last post, we’ve made progress with passkey authentication through mobile access. Looking ahead, we also intend to explore desktop passkeys later this year.
When this work does get picked up, Yubikey passkeys will be considered, however we can’t confirm at this stage whether they’ll definitely be included. As soon as we have more concrete news to share, we’ll update you on this thread.
An error occurred while saving the comment John Crane
commented
A core driver for cyber criminals is to steal money. It should be a standard offering to have a hardware based, phishing resistant authenticator like Yubikey on a financial system. Please take this seriously Xero.
John Crane
supported this idea
·
Please add Okta to the list of IdPs that should be supported when SAML SSO is added to Xero.