---
title: Set SAML Single Sign-On Authentication for Users
canonical: https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-saml-single-sign-on-authentication-for-users/
product: CloudConnexa Docs
description: How to set up SAML Single Sign-On (SSO) as an authentication method for your CloudConnexa users. Provide IdP management for user accounts.
keywords: SAML Single Sign-On authentication
---

# Set SAML Single Sign-On Authentication for Users

## Overview

SAML Single Sign-On (SSO) allows users to authenticate to CloudConnexa using an external identity provider (IdP), such as Okta, Microsoft Entra ID (Azure AD), OneLogin, or Ping Identity.

When SAML authentication is configured, CloudConnexa acts as the SAML Service Provider (SP) and redirects users to the configured IdP for authentication. After successful authentication, CloudConnexa can automatically create user accounts and assign user groups based on configured attribute mappings and user group mapping rules.

CloudConnexa supports:

- SAML-based user authentication.
- Automatic user provisioning at first sign-in.
- User attribute mapping.
- User group mapping based on SAML attributes.

> **Note**
>
> The Owner always uses the credentials (email and password) associated with the CloudConnexa account. SAML authentication applies only to Users and Administrators of the WPC.

> **Tip**
>
> If you want to offer SAML SSO alongside CloudConnexa Username & Password authentication, refer to [Multiple Auth Methods](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/about-multiple-authentication-methods.md).

## Before you begin

Before configuring SAML authentication:

- Ensure you have administrative access to your IdP.
- Ensure your IdP supports SAML 2.0.
- Identify the users or groups that should have access to CloudConnexa.
- Gather the metadata required by your IdP and CloudConnexa.

## Configure SAML SSO

To configure SAML SSO, follow these steps:

1. Sign in to the CloudConnexa Administration Portal using your WPC's **Cloud ID** address (for example, `yourcompany.openvpn.com`).
2. Navigate to **Settings → User Authentication**.
3. Select **Edit**.
4. Select **SAML Single Sign-On**.
5. Select **Configure**.
6. Configure your identity provider using the information provided in the **CloudConnexa Metadata** section.

   > **Tip**
   >
   > CloudConnexa acts as the SAML SP. Configure CloudConnexa as an application in your identity provider and grant access to the appropriate users. Refer to [SAML configuration tutorials](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml.md) and [authentication video tutorials](https://openvpn.net/cloud-docs/videos/configuration/authentication.md).
7. Select **Next**.
8. Configure the attribute mappings used to map SAML attributes to CloudConnexa user fields.

   > **Tip**
   >
   > Refer to [SAML configuration tutorials](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml.md) and [authentication video tutorials](https://openvpn.net/cloud-docs/videos/configuration/authentication.md).
9. Select **Next**.
10. Review the configuration, and select **Confirm**.

> **Important**
>
> If you replace an existing authentication method with SAML SSO instead of using Multiple Authentication Methods, users created with the previous authentication method are suspended until they authenticate with an enabled authentication method or are otherwise reconfigured.

> **Note**
>
> To set rules for mapping a specific SAML attribute's values to CloudConnexa User Groups, refer to [SAML User Group Mapping](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-saml-single-sign-on-user-group-mapping-rules.md).

## What happens next

After successful authentication:

- CloudConnexa creates the user account if it doesn't already exist.
- User attributes are populated from the SAML assertion according to the configured attribute mappings.
- Any [configured SAML user group mapping rules](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-saml-single-sign-on-user-group-mapping-rules.md) may be applied.
- The user appears in **Users → Users**.

## Related Tutorials and Videos

### SAML Configuration Tutorials

- [Authenticate Using SAML with Microsoft Entra ID](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-microsoft-entra-id.md)
- [Authenticate Using SAML with Okta](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-okta.md)
- [Authenticate Using SAML with Google Workspace](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-google-workspace.md)
- [Authenticate Using SAML with Keycloak](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-keycloak.md)
- [Authenticate Using SAML with OneLogin](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-onelogin.md)
- [Authenticate Using SAML with JumpCloud](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--authenticate-using-saml-with-jumpcloud.md)
- [Set Up IdP-Initiated SAML SSO to the User Portal](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/authentication/saml/tutorial--set-up-idp-initiated-saml-sso-to-the-user-portal.md)

### SAML Configuration Videos

- [Video: Configure Authentication With SAML and Azure AD (Entra ID)](https://openvpn.net/cloud-docs/videos/configuration/authentication/video--configure-authentication-with-saml-and-azure-ad--entra-id.md)
- [Video: Map Microsoft Entra ID SAML Attribute to CloudConnexa User Groups](https://openvpn.net/cloud-docs/videos/configuration/authentication/video--map-microsoft-entra-id-saml-attribute-to-cloudconnexa-user-groups.md)
- [Video: Configure Authentication With SAML and Okta](https://openvpn.net/cloud-docs/videos/configuration/authentication/video--configure-authentication-with-saml-and-okta.md)
- [Video: Map Okta SAML Attribute to CloudConnexa User Groups](https://openvpn.net/cloud-docs/videos/configuration/authentication/video--map-okta-saml-attribute-to-cloudconnexa-user-groups.md)
- [Video: Configure Authentication With SAML and OneLogin](https://openvpn.net/cloud-docs/videos/configuration/authentication/video--configure-authentication-with-saml-and-onelogin.md)

---

Prev: [CloudConnexa Username & Password](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/set-cloudconnexa-username---password-authentication-for-users.md)
Next: [SAML and SCIM SP Endpoints](https://openvpn.net/cloud-docs/owner/settings/settings---user-authentication/saml-and-scim-service-provider-endpoints-for-cloudconnexa.md)
Index: https://openvpn.net/cloud-docs/llms.txt