What is Enterprise SSO, and why use it?
Enterprise SSO is an authentication method that allows users to securely sign in to multiple applications with a single set of credentials. By implementing SSO, you can minimize the risk of password-related security breaches while maintaining greater control over your team's access to Termius.
Enterprise SSO is available exclusively in the Termius Business plan, so now is the perfect time to upgrade if you're not already subscribed.
Termius Support of SSO
Termius, in partnership with WorkOS, offers extensive support for a variety of SSO providers, ensuring seamless access and enhanced security for your team. Major providers include Google, Okta, OneLogin, Microsoft Azure Active Directory, Auth0, Duo Security, and many others. The comprehensive list of supported providers can be found in the table below.
If your preferred SSO provider is not listed, you can opt for Custom SAML or Custom OpenID configurations.
| SSO Provider |
|---|
| ADP OpenID Connect |
| Auth0 |
| Azure AD SAML |
| CAS SAML |
| ClassLink |
| Cloudflare |
| CyberArk SAML |
| Duo SSO |
| Google SAML |
| JumpCloud SAML |
| Keycloak |
| LastPass |
| Microsoft AD FS SAML |
| miniOrange |
| NetIQ |
| Okta SAML |
| OneLogin SAML |
| Oracle SAML |
| PingFederate SAML |
| PingOne SAML |
| Rippling SAML |
| Salesforce |
| Shibboleth Generic SAML |
| Shibboleth Unsolicited SAML |
| SimpleSAML.php |
| VMware |
Please note that this list is subject to change as we continuously strive to enhance and expand our SSO provider support.
Setting Up Enterprise SSO
Follow these steps to configure SSO for your enterprise in Termius:
- Log in to your Termius account at https://account.termius.com/enterprise.
- Click the "Add Domain" button and enter your domain(s).
- Click the "Configure now" button to initiate the SSO setup.
- On the WorkOS setup page, select your identity provider from the list and follow the instructions.
Testing Your Enterprise SSO Configuration with Termius
To ensure the successful implementation of SSO, complete the following test:
- Ensure the test session on the WorkOS side passes successfully.
- Log out of your Termius account.
- Click "Continue with Enterprise SSO" on the login page.
- Input your enterprise email address and click "Continue."
- You will be redirected to your identity provider's login page. Enter your credentials and log in.
- If the configuration is successful, you will be redirected back to Termius and logged in via SSO.
Enforcing SSO Login for Your Team
Once your SSO configuration has been tested and verified, you can enforce SSO login for your entire team by visiting https://account.termius/team and selecting "Require to log in via SSO."
Conclusion You have now successfully set up Single Sign-On (SSO) for your enterprise with Termius, streamlining user management and enhancing security. If you encounter any questions or issues, please feel free to reach out to our support team.