Skip to main content
Set up Single Sign-On (SSO) so team members can sign in to the Iru Endpoint Web App with your existing identity provider. The same SSO connection can be used for Require Authentication with Automated Device Enrollment, keeping access secure and consistent from admin sign-in through device enrollment.

​
Configure SSO

1

Navigate to the Account Menu Button

In Iru Endpoint, in the sidebar, click the Account Menu Button.
2

Access authentication settings

Click the Access option in the menu.
Screenshot of the account menu with Access option highlighted
3

Add an authentication method

Select the Admin and authentication tab (if needed) and scroll to Authentication methods. Click + Authentication method.
4

Create SSO connection

Enter a display name, select the connection type (Microsoft Entra ID, Google Workspace, or Custom SAML for other providers), and click Create.
5

Complete the provider configuration

Follow the configuration prompts in Iru Endpoint and in your identity provider (e.g., redirect URL, client ID, client secret). Finish the setup in Iru Endpoint as prompted.
6

Allow for tenant authentication

When the connection is configured, click the ellipsis next to the connection name and select Allow for tenant authentication so team members can sign in with SSO.
7

Test connection

Test sign-in in a private browser window before disabling other authentication methods.

​
Supported SSO connection types

Iru Endpoint supports the following SSO connection types:

​
Considerations

  • Passkey, Google Social, and Microsoft Social remain available by default. You can disable them after SSO is configured and tested (ellipsis → Disable for tenant authentication).
  • An SSO connection can be used for Require Authentication during enrollment without being allowed for tenant authentication.
  • Team members must be invited in Access before they can sign in with SSO. Test in a private browser window before disabling other authentication methods to avoid lockout.
For detailed configuration for each provider, see Single Sign-On.

​
Next Steps

After configuring SSO:
1

Set up user directory integration

See User Directory Integration to sync users.
2

Set up platform integrations (one or more)

Set up the platforms you plan to manage. You can enable one, two, or all three:
  • Apple Setup: Configure APNs, Apple Business Manager, and Apps and Books
  • Windows Setup: Enable the Windows platform and configure settings
  • Android Setup: Enable Android and configure Android Enterprise