Set-up SAML SSO with Okta, Microsoft Entra ID or a custom setup

SAML SSO is only available if you are on an Advanced or Beyond plan.

SAML SSO allows access to Pleo through your organisation's identity provider, to improve efficiency and security. 

To setup SAML SSO for Pleo:

1. Navigate to Settings 
2. Select Integrations
3. Click SAML Single Sign-On
4. Select your identity provider or choose a custom setup for other providers supporting SAML 2.0
5. Follow the on-screen instructions for how to configure the integration - you may need your IT department to access your Identity provider
6. Click Save configuration

Test and enable SAML SSO:

1. Go to Exclusions
2. Add one of the Admins to avoid being locked out ot the account
3. Test the setup 
4. Switch the toggle to enable SAML SSO for the organisation

If you accidentally do get locked out of your account, reach out to your Customer Success Manager for further assistance. 

Good to know:

• It's not possible to have multiple IDPs connected to the same Multi Entity account
• Enabling SAML SSO doesn't disrupt active user sessions, but for any new sessions log in through SSO will be mandatory
• It's possible to exclude users from logging in through SSO by adding them to the Exclusions list