Configure Single Sign On (SSO)

Please only proceed with changing the credentials if you are absolutely certain that you have the required information.

If your organisation uses an Identity Provider, or IdP (such as Microsoft, Okta, etc) you may be able to integrate with Axscend Fleet Technologies to use a Single Sign On.

"What is Single Sign On?"

Single Sign-On (SSO) is an authentication process that allows a user to access multiple applications or services with a single set of login credentials (such as username/email address and password). The primary goal of SSO is to simplify the user experience by eliminating the need to remember and enter different credentials for each application.

Single Sign-On (SSO) can improve security in several ways, but the two key advantages include:

Reduced Password Fatigue - users only need to remember one set of strong credentials, reducing the likelihood of users choosing weak passwords or reusing passwords across multiple applications
Consistent Security Policies - organisations can enforce consistent security policies across multiple applications. This ensures that security measures, such as password complexity requirements or account lockout policies, are applied uniformly.

"What Identity Providers are compatible?"

We support Azure (Microsoft Entra) and Okta as our primary SSO Providers, but we may be able to integrate with other providers that use the SAML2 standard.

See Technical Guide for SSO with Azure for guidance setting SSO up with Azure/Microsoft Entra.

See Technical Guide for SSO with Okta for guidance setting SSO up with Okta.

Contact Axscend Support to discuss potential SSO integrations with other IdP providers.

"What details do I need to enable SSO?"

You will need to know which SSO provider your organisation uses.
- This will depend on the Identity Provider (IdP).
Typically, you will need:
- Your Axscend Company ID
- Your Axscend Integration ID
- The configuration details to input in your Identity Provider (IdP)
Doing the above will generate either Metadata URL or a Metadata XML file to upload on the Axscend Portal.

"What do I need to do to configure SSO?"

See Technical Guide for SSO with Azure for guidance setting SSO up with Azure/Microsoft Entra.

See Technical Guide for SSO with Okta for guidance setting SSO up with Okta.

Obtaining an Integration ID

You will require an Integration ID to set up a connection with Axsend with your IdP.

Click Admin > Manage Companies
Select the company you wish to set up SSO from the sidebar.
Click the SSO Provider tab
Select the appropriate SSO Provider
Copy the Integration ID

How can I find my Company ID?

Your company ID will be displayed in the toolbar.

You should now use the Integration ID to configure your IdP.

Follow the appropriate specific guide for configuring your IdP.

Technical Guide for SSO with Azure

Configuring your organisation's SSO details

Ensure you have either the Metadata URL or Metadata XML ready.

You are still on the SSO Provider tab.

Select a Force SSO Option

You can select the extent to which SSO is enforced.

The default login option is:

No SSO - users log in with email and password only

The following login options require SSO to be configured:

Not forced - email and password with optional SSO
Forced SSO - SSO only for all organization users.

Enabling Forced Single Sign-On provides an additional layer of assurance that your organisation’s users are engaging in a more secure authentication process.

However, we recommend that you do not force SSO until you have tested if the SSO set-up is working.

In the Source field select either Metadata URL or Metadata XML
Based on the selected source either:
1. Enter Metadata URL
2. Upload a Metadata XML file
Click Save SSO Provider

Testing SSO Setup

After setting up SSO, verifying it works before forcing it to be used is important.

Log out of the Portal.
Enter your email address and click login.
Click login.

If your email address is recognised by an IdP you will see a button to authenticate externally. E.g. “Sign In With Microsoft”

If SSO isn’t forced, you will still see the option to use a password, as per the example.

If SSO is forced, you will only see the highlighted button.

Click Sign In with XXXX
1. This will show the option of your IpD (e.g. Microsoft, Okta)
Enter your password

After choosing to authenticate using the IdP, a successful login will redirect to the Portal.

Use your IdP password, not your Portal password when logging in via SSO.

Click Sign In

You are authenticated and are redirected to the Portal.

Revoking SSO for your organisation

If you want to remove the SSO of your organisation, you can revoke the credentials.

Click Admin > Manage Companies
Click the company you wish to revoke SSO from the sidebar.
Select the SSO Provider tab.
Click Revoke