Set-up SAML SSO with Okta or Azure

SAML SSO is only available if you are on an Advanced plan. If you are not yet on an Advanced plan, reach out to your customer success manager to discuss possibilities. 

To activate SAML for Pleo:

1. Reach out to Pleo to get your Pleo ID
   
   
2. Create a new application for Pleo in Okta or Azure- you may need your IT department for this
   • OKTA:
     1. Create a new application with the NameId configured as EmailAddress
     2. Configure the sign-in URL to https://auth.pleo.io/saml/${PLEO_ID}/callback
     3. Click View SAML setup instructions
     4. Share the single sign-on URL, issuer and certificate with Pleo
   • Microsoft Azure:
     1. Create a new Enterprise application for Pleo
     2. Navigate to the Single sign-on 
     3. Configure the Entity-Id as pleoio://${PLEO_ID}
     4. Configure the Reply URL to https://auth.pleo.io/saml/${PLEO_ID}/callback
     5. Configure the Sign on URL to https://auth.pleo.io/saml/${PLEO_ID}/login
     6. Configure the NameId as EmailAddres.
     7. Share the Entity-Id, the certificate and Login URL with Pleo
        
        
3. Your SAML set-up should be ready within 1-2 business days - Pleo will notify you per email