# SAML single sign-on with Okta and Microsoft Entra ID

> Your team signs in to EthicsPortal through your identity provider over SAML 2.0. Administrators can require it for your verified email domains.

Canonical: https://ethicsportal.eu/changelog/saml-single-sign-on/
Last updated: 2026-11-11

Your team can now sign in to EthicsPortal through your company's identity provider. EthicsPortal supports SAML 2.0, so it works with Okta, Microsoft Entra ID and other SAML 2.0 providers.

![Single sign-on settings in EthicsPortal, with the service provider details to copy into the identity provider](https://ethicsportal.eu/images/screenshots/en-changelog-saml-single-sign-on.webp)

An administrator connects the provider in the organisation settings. After you prove that you own an email domain with a DNS record, you can require single sign-on for everyone with an address at that domain. You can also let the provider create accounts at the first sign-in. When the provider renews its signing certificate, paste the new certificate below the old one, and sign-in keeps working during the change.

Use it together with [SCIM provisioning](https://ethicsportal.eu/changelog/scim-provisioning/), so that people who leave the company lose access automatically. Read the [identity integration guide](https://ethicsportal.eu/developers/identity-integrations/).