Xygeni Single Sign-On (SSO) Authentication

Xygeni can be integrated with a Local Authentication system, avoiding the need to use/maintain additional credentials.

By implementing SAML Single Sign-One (SSO), a user can log in to different independent systems through the use of a single set of credentials, centrally managed in a repository

If your organization is using a SAML-compliant repository (e.g. Active Directory FS, Azure AD, CA Single Sign-On, etc), you can configure Xygeni to use SAML

SAML stands for Security Assertion Markup Language and it’s an open standard for exchanging authentication and authorization data between parties. In particular, between an identity provider (IdP) and a Service Provider (SP).

Xygeni plays the role of Service Provider (SP) in an SSO - SAML context.

Your Local Authentication system plays the role of Identity Provider (IdP)

To configure SSO in Xygeni you must first, of course, rely on an existing Identity Provider (IdP). There are many available IdP systems, all of them sharing SAML concepts (more or less adapted to their terminology).

The exact configuration depends on specifics of the IdP used.

Please, find below instructions on how to setup SAML SSO in some IdPs:

1. Okta

2. Microsoft Entra ID