Skip to content

Settings and activity

1 result found

  1. 722 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    How important is this to you?

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Thanks for your feedback on Single Sign-On(SSO). We last updated this idea in October 2025, and we’re sorry it’s taken some time for us to provide another. We will do our best to keep you more informed of progress as it continues.

    Where SSO is today

    We’ve built an SSO capability for accountant and bookkeeper partner practices using OpenID Connect (OIDC). We ran a closed beta with a small group of partners, which is now complete, and those partners are connected. We’re still confirming how and when other accounting and bookkeeping partners can access it. SSO isn’t currently available to businesses or IT providers. We’ll share access details in a future update once they’re confirmed.

    What we’re looking at next

    We’re exploring what it would take to offer SSO to small businesses. Business needs differ from accountant and bookkeeper partners’, so we’re looking at:

    • how a business and its users…
    An error occurred while saving the comment
    IT Service commented  · 

    To better serve all customers, I believe Xero should support SAML 2.0 and/or OpenID Connect (OIDC) for authentication, along with SCIM for automated user provisioning and deprovisioning. This would allow seamless integration with multiple providers, avoiding vendor lock-in and meeting enterprise security requirements.

    An error occurred while saving the comment
    IT Service commented  · 

    I’ve recently followed up with Xero Support regarding this SSO feature, and it appears the current development focus is on Microsoft Entra ID. While that’s great for organizations using Microsoft’s identity platform, many of us have been waiting for a vendor-neutral, standards-based SSO solution that works with a wide range of identity providers.

    To better serve all customers, I believe Xero should support SAML 2.0 and/or OpenID Connect (OIDC) for authentication, along with SCIM for automated user provisioning and deprovisioning. This would allow seamless integration with Okta, Ping Identity, Auth0, Google Workspace, and other providers — avoiding vendor lock-in and meeting enterprise security requirements.

    If you agree, please vote for my related idea here:

    🔗 Enable Generic SSO Support via SAML 2.0 / OIDC with SCIM Provisioning: https://productideas.xero.com/forums/967121-users-setup/suggestions/50993242-enable-generic-sso-support

    An error occurred while saving the comment
    IT Service commented  · 

    Enable Generic SSO Support via SAML 2.0 / OIDC with SCIM Provisioning

    IT Service supported this idea  ·