GraphOS Single Sign-On
Simplify access management with SAML and OIDC-based SSO
Single sign-on lets your team log into Apollo GraphOS using your organization's identity provider (IdP). This streamlines access management, improves security, and enhances the user experience by reducing the need to manage additional passwords.
As of October 2024, all GraphOS organizations with Enterprise or Dedicated plans can configure SAML and OIDC-based SSO without needing to contact Apollo. Previously, SSO setup required assistance from Apollo Support.
Setup instructions
Only GraphOS Org admins can set up SSO. Additionally, you must have administrative access to your identity provider (IdP) to complete setup.
To set up SSO, follow the instructions for your configuration method:
SAML-based
Microsoft Entra ID (formerly known as Azure Active Directory)
OIDC-based
Microsoft Entra ID (formerly known as Azure Active Directory)
Role assignment
Once you've set up SSO, each user assigned to GraphOS in your IdP has the default GraphOS role configured in your GraphOS SSO settings. You can configure your IdP to assign GraphOS roles based on groups in your IdP. See the Assign GraphOS roles section for your configuration method for instructions.
SAML-based
Microsoft Entra ID (formerly known as Azure Active Directory)
OIDC-based
Microsoft Entra ID (formerly known as Azure Active Directory)