Thanks for your feedback on Single Sign-On(SSO). We last updated this idea in October 2025, and we’re sorry it’s taken some time for us to provide another. We will do our best to keep you more informed of progress as it continues.
Where SSO is today
We’ve built an SSO capability for accountant and bookkeeper partner practices using OpenID Connect (OIDC). We ran a closed beta with a small group of partners, which is now complete, and those partners are connected. We’re still confirming how and when other accounting and bookkeeping partners can access it. SSO isn’t currently available to businesses or IT providers. We’ll share access details in a future update once they’re confirmed.
What we’re looking at next
We’re exploring what it would take to offer SSO to small businesses. Business needs differ from accountant and bookkeeper partners’, so we’re looking at:
how a business and its users are set up in Xero
which businesses would qualify
how we’d check a company owns its email domain
how onboarding and support would work
Help us understand your needs
If you run or work in a small business, an accounting or bookkeeping practice, or are an IT provider, please take our short survey. It will give us a sense of how you sign in today, which identity provider you use (if any) and what you need from SSO. It takes about 5 minutes and closes Friday 11 December 2026.
We don’t have a timeline to share yet. We’ll share an update on the survey findings in the new year (2027).
Thanks for your feedback on Single Sign-On(SSO). We last updated this idea in October 2025, and we’re sorry it’s taken some time for us to provide another. We will do our best to keep you more informed of progress as it continues.
Where SSO is today
We’ve built an SSO capability for accountant and bookkeeper partner practices using OpenID Connect (OIDC). We ran a closed beta with a small group of partners, which is now complete, and those partners are connected. We’re still confirming how and when other accounting and bookkeeping partners can access it. SSO isn’t currently available to businesses or IT providers. We’ll share access details in a future update once they’re confirmed.
What we’re looking at next
We’re exploring what it would take to offer SSO to small businesses. Business needs differ from accountant and bookkeeper partners’, so we’re looking at:
Thanks for the update, but after 13 years of requests this is disappointing. Xero is falling behind on what is now a baseline security control, not a nice feature.
Xero holds some of the most sensitive data a business has: bank feeds, payroll, supplier details and payment runs. Those are exactly what attackers target for invoice fraud and payment diversion. Without Entra ID SSO, businesses can't apply their Conditional Access policies, device compliance checks or central offboarding to Xero. That leaves a separate set of credentials sitting outside their security controls.
Cyber insurers and frameworks increasingly expect centralised identity and MFA across all business-critical systems, and Xero is often the gap we have to explain to clients.
After this long, a committed timeline is the minimum customers should expect. Could you share a target quarter, even an indicative one, and details of how Partners can join the pilot group?
Matthew Phillips
supported this idea
·
Thanks for the update, but after 13 years of requests this is disappointing. Xero is falling behind on what is now a baseline security control, not a nice feature.
Xero holds some of the most sensitive data a business has: bank feeds, payroll, supplier details and payment runs. Those are exactly what attackers target for invoice fraud and payment diversion. Without Entra ID SSO, businesses can't apply their Conditional Access policies, device compliance checks or central offboarding to Xero. That leaves a separate set of credentials sitting outside their security controls.
Cyber insurers and frameworks increasingly expect centralised identity and MFA across all business-critical systems, and Xero is often the gap we have to explain to clients.
After this long, a committed timeline is the minimum customers should expect. Could you share a target quarter, even an indicative one, and details of how Partners can join the pilot group?