Settings and activity
4 results found
-
72 votes
Thanks for sharing your interest in single sign on across Xero's products. This is available currently across many areas or Xero. For example if you are logged in and working in Xero, then move across to Xero Central(our support hub) you may need to click the login button in the top right of the screen but if you're session hasn't ended you should find the page should refresh and automatically log you in.
We appreciate wanting a smoother login experience that's recognised across all Xero products and will share if there are any improvements planned around this with you all, here.
An error occurred while saving the comment 
Simon Pilot
supported this idea
·
-
13 votes
Hi team, as another update surrounding passkeys we wanted to share that this week we've released passkey log in for Xero Me app users who haven't set up MFA yet. This is just the first stage, and over the coming months we'll progressively make this feature available to more users. I'll be back to share more as passkeys become available to more users.
Simon Pilot
supported this idea
·
-
79 votes
Thanks for your recent comments, and for continuing to support this idea, everyone. We appreciate the passion here, and I’m sorry it’s taken a while to return with another update.
Since our last post, we’ve made progress with passkey authentication through mobile access. Looking ahead, we also intend to explore desktop passkeys later this year.
When this work does get picked up, Yubikey passkeys will be considered, however we can’t confirm at this stage whether they’ll definitely be included. As soon as we have more concrete news to share, we’ll update you on this thread.
Simon Pilot
supported this idea
·
-
724 votes
Thanks for your feedback on Single Sign-On(SSO). We last updated this idea in October 2025, and we’re sorry it’s taken some time for us to provide another. We will do our best to keep you more informed of progress as it continues.
Where SSO is today
We’ve built an SSO capability for accountant and bookkeeper partner practices using OpenID Connect (OIDC). We ran a closed beta with a small group of partners, which is now complete, and those partners are connected. We’re still confirming how and when other accounting and bookkeeping partners can access it. SSO isn’t currently available to businesses or IT providers. We’ll share access details in a future update once they’re confirmed.
What we’re looking at next
We’re exploring what it would take to offer SSO to small businesses. Business needs differ from accountant and bookkeeper partners’, so we’re looking at:
- how a business and its users…
An error occurred while saving the comment Simon Pilot
commented
We are implementing the Australian ESSENTIAL 8 security measures. Can we have single sign on so we can use phishing resistant MFA & log MFA failure? https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/essential-eight/essential-eight-maturity-model
An error occurred while saving the comment Simon Pilot
commented
The purpose needs to be changed from easily login to cybersecurity: "Successful and unsuccessful multi-factor authentication events are centrally logged". This is a security compliance issue.
This is preventing my company achieving Australia's Essential 8 Cybersecurity Maturity levels above level 1
An error occurred while saving the comment Simon Pilot
commented
Single Sign On SSO with Microsoft Entra ID is required to restrict logins to compliant devices only. We don't allow BYOD access to Xero but we can't enforce this check without SSO sign in workflows. This represents an unacceptable risk to our business.
Simon Pilot
supported this idea
·
Cybersecurity - Phishing resistant MFA & logging of failed MFA.
The Australian government publishes a set of 8 essential security measures. In order to progress beyond maturity level 1, platforms need to provide central logging of failed multifactor attempts and phishing resistant methods. Xero currently provides neither and can achieve this via SSO. Please add single sign on support with advice per https://www.cyber.gov.au/resources-business-and-government/maintaining-devices-and-systems/system-hardening-and-administration/system-hardening/implementing-multi-factor-authentication