Skip to main content
Chamelio supports Single Sign-On (SSO), acting as a Service Provider (SP). SSO lets your organization authenticate users through your existing identity provider (IdP), so employees sign in using corporate credentials.

​
What SSO Enables

  • Users sign in using your company’s identity provider
  • Password management and MFA are handled by your IdP
  • User access is centrally managed by your IT or security team
  • Users sign in once with their corporate credentials

​
Supported Identity Providers

Chamelio works with identity providers that support SAML 2.0 or OIDC, including:
  • Okta
  • Azure Active Directory (Entra ID)
Contact support@chamelio.ai to confirm compatibility for other providers.

​
Authentication Protocols

  • SAML 2.0
  • OpenID Connect (OIDC)

​
User Provisioning and Access

SSO controls authentication only. Authorization within Chamelio is managed separately - roles and permissions are configured within Chamelio regardless of how users authenticate. Users must exist in Chamelio (or be allowed via auto-provisioning) to access the platform after SSO authentication.

​
Setup Process

SSO is configured through a self-serve flow initiated by the Chamelio team:
1

Request an SSO setup link

Email support@chamelio.ai to request SSO setup. Chamelio generates and shares a secure configuration link.
2

Configure your identity provider

Your IT team uses the provided instructions to configure your IdP. For SAML, metadata or certificates are exchanged. For OIDC, client details are verified.
3

Test with a pilot user

Complete a login test with a pilot user before rolling out to the full team.
4

Enable SSO for your workspace

Once testing passes, SSO is enabled for your workspace.

​
Common Questions

Yes. Chamelio can require SSO for all users.
Yes. MFA is enforced through your identity provider, not Chamelio directly.
This depends on your workspace configuration. Password-based login can be disabled once SSO is fully rolled out.
SCIM availability depends on your plan and configuration. Where available, it can automatically create, update, and deactivate users in Chamelio when changes are made in your identity provider (some providers, such as Okta, can also push group assignments). See the provider-specific SCIM guides below, or contact support@chamelio.ai to discuss enabling it for your organization.

​
SSO Setup Guides

Once you have your Self Service link, follow the guide for your identity provider:

Entra ID - OIDC

Set up SSO via OpenID Connect from Microsoft Entra ID

Entra ID - SAML

Set up SSO via SAML from Microsoft Entra ID

Okta - OIDC

Set up SSO via OpenID Connect from Okta

​
SCIM Provisioning Guides

To keep users and groups automatically synchronized with Chamelio, set up SCIM provisioning after completing SSO:

Entra ID - SCIM

Configure automated user and group provisioning from Entra ID

Okta - SCIM

Configure automated user and group provisioning from Okta

​
Getting Started

To configure SSO, email support@chamelio.ai. Chamelio will generate a secure self-serve setup link for your IT or security team.