Skip to main content

Single sign-on

If you are on an Teams Plus or Enterprise license and would like to turn on single sign-on, here’s everything you need to know about SSO.

Gemma avatar
Written by Gemma
Updated this week

Single sign-on

PageProof users in your organization can use single sign-on to log into PageProof using the same credentials as they use for your other corporate applications. 

This is all possible if your organization has a PageProof Teams Plus or PageProof Enterprise license and is using one of these SSO providers:

  • Microsoft Entra ID (Azure Active Directory)

  • Okta

  • OneLogin

  • Delinea

  • G Suite

  • Ping Identity

  • Shibboleth

  • Any SAML2 provider

Multi-factor authentication (MFA) is turned on at your SSO provider. PageProof also supports 2FA for users who are not part of your SSO directory application.

SCIM (System for Cross-domain Identity Management) is also available to PageProof Enterprise customers using single sign-on.

PageProof supports IdP initiated, SP initiated, and SP initiated with passthrough support.

  • IdP initiated begins at the Identity Provider with the sign-in completing first, then redirecting to PageProof via the ReturnURL.

  • SP initiated begins at the PageProof login screen where the user enters their email address. PageProof retrieves the details of the IdP and redirects the user to the IdP. Once the sign-in is complete, the user is redirected to the ReturnURL.

  • SP initiated with passthrough support follows the SP initiated flow, but allows the email to be auto-populated and continues the uninterrupted login flow to the IdP. This login flow has [email protected]&SSORedirect=true appended to the login URL.

To get started, your PageProof customer success manager can provide you with:

The attribute returned should be configured with NameID as emailAddress.

The metadata.xml is returned to PageProof (containing the public key for signing) and is loaded against the PageProof team requiring SSO. The configuration can be set to enforced once testing is complete. This will route all users in your team to sign-in via SSO and will remove the local password account ability.

Please contact [email protected] to talk further about setting up single sign-on for logging into PageProof with ease, and controlling logins at your corporate IT management level.

Learn more about PageProof’s industry-leading security features.

Did this answer your question?