--- title: "Whatfix Single Sign On" slug: "whatfix-single-sign-on" updated: 2025-03-06T06:38:55Z published: 2025-03-06T06:38:55Z canonical: "support.whatfix.com/whatfix-single-sign-on" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.whatfix.com/llms.txt > Use this file to discover all available pages before exploring further. # Whatfix Mobile Single Sign On Whatfix supports login with Single Sign-On (SSO). SSO is an authentication process that enables users to access multiple applications with one set of login credentials. > [!NOTE] > Info: > > To enable SSO for your Whatfix account, contact [support@whatfix.com](mailto:support@whatfix.com?Subject=Enable%20SSO%20in%20Mobile%20&Body=Hello%20Team%2C%0A%0APlease%20enable%20SSO%20for%20my%20mobile%20account.%0A%0AThanks%20and%20regards.). ### How does SSO work in Whatfix? 1. Click **Sign In with SSO** on your login screen. ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/mobile_sso_sign in.png?sv=2026-02-06&spr=https&st=2026-10-29T17%3A14%3A03Z&se=2026-10-29T18%3A14%3A03Z&sr=c&sp=r&sig=0eEnttLcFXP6YpZWl3I3k8j4qVu%2FPIUsp8x2rcOoEbo%3D) 2. On the SSO Sign in page on the screen, enter your email address and then click **Sign In**. ![Mobile_click_sso_sign_in.png](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/Mobile_click_sso_sign_in.png?sv=2026-02-06&spr=https&st=2026-10-29T17%3A14%3A03Z&se=2026-10-29T18%3A14%3A03Z&sr=c&sp=r&sig=0eEnttLcFXP6YpZWl3I3k8j4qVu%2FPIUsp8x2rcOoEbo%3D) 3. On the Identity Provider screen that opens, enter your authentication information. ![id_verification_screen.png](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/id_verification_screen.png?sv=2026-02-06&spr=https&st=2026-10-29T17%3A14%3A03Z&se=2026-10-29T18%3A14%3A03Z&sr=c&sp=r&sig=0eEnttLcFXP6YpZWl3I3k8j4qVu%2FPIUsp8x2rcOoEbo%3D) > [!WARNING] > Note: > > Once you enter the credentials of the Identity Provider, it is verified and you are then redirected to the Whatfix account. ### Identity Providers supported by Whatfix An **Identity Provider (IdP)** is an authority system that holds and verifies the user authentication information. Whatfix interacts with your IdP and trusts the information provided by the IdP to gain access to the application. Whatfix supports the following identity providers: - Okta - PingFederate - Azure Active Directory Any identity provider compliant with SAML 2.0 works with Whatfix SSO. --- ### Requirements to enable SSO on your account The following information has to be exchanged with Whatfix. | Information | Detail | Example | | --- | --- | --- | | The organization provides this information | Enterprise Name* | XYZ corp | | IdP EntityId* | [https://app.onelogin.com/saml/metadata/905b5aec-defd-4f7a-a910-dae67c220cbe](https://app.onelogin.com/saml/metadata/905b5aec-defd-4f7a-a910-dae67c220cbe) | | IdP SSO Service URL* | [https://ddash.onelogin.com/trust/saml2/http-post/sso/884595](https://ddash.onelogin.com/trust/saml2/http-post/sso/884595) | | X509 certificate* | ![](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/SSO_X509.png?sv=2026-02-06&spr=https&st=2026-10-29T17%3A14%3A03Z&se=2026-10-29T18%3A14%3A03Z&sr=c&sp=r&sig=0eEnttLcFXP6YpZWl3I3k8j4qVu%2FPIUsp8x2rcOoEbo%3D) | | SAML identity location* (If the NameID is not available, you can provide the attribute element instead) | urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress OR | | Whatfix provides this information | Identifier/Audience URI/Entity ID | whatfix | | ACS URL* (US) | https://whatfix.com/saml_auth/?service=samlFromIdp | | ACS URL* (India) | https://whatfix.com/saml_auth/?service=samlFromIdp | | ACS URL* (EU Dashboard) | https://eu.whatfix.com/saml_auth/?service=samlFromIdp | | Sign-on URL* | US: [https://leap-eus.whatfix.com/sso-login](https://leap-eus.whatfix.com/sso-login) India: [https://leap-in.whatfix.com/sso-login](https://leap-in.whatfix.com/sso-login) EU: [https://leap-eu.whatfix.com/sso-login](https://leap-eu.whatfix.com/sso-login) > [!NOTE] > Info: > > - If you face any issues while adding the mentioned **Sign-on URL,** you can also add the **ACS URL** (https://whatfix.com/saml_auth/?service=samlFromIdp) in place of the **Sign-on URL.** > - For example, in Okta, the ACS URL can added in place of the Sign-on URL. ![sign_on_url](https://cdn.document360.io/a268766e-d74d-4619-9613-e2472f809ffb/Images/Documentation/sign_on_url.png?sv=2026-02-06&spr=https&st=2026-10-29T17%3A14%3A03Z&se=2026-10-29T18%3A14%3A03Z&sr=c&sp=r&sig=0eEnttLcFXP6YpZWl3I3k8j4qVu%2FPIUsp8x2rcOoEbo%3D) | | Relay state* | Relay State is dynamic and will be different for every organization. Contact your Whatfix representative to get your Relay State. | | | Relay state* (EU Dashboard) | Relay State is dynamic and will be different for every organization. Contact your Whatfix representative to get your Relay State. | * The value of each detail varies for every organization. For more details, contact [**support@whatfix.com**](mailto:support@whatfix.com?Subject=Require%20help%20enabling%20SSO%20for%20my%20account&Body=Hello%20Team%2C%0AKindly%20help%20me%20with%20enabling%20SSO%20for%20my%20account%2C%20and%20the%20fields%20associated%20with%20it.%20%0AThanks%20and%20Regards.). > [!WARNING] > Note: > > - Logging in via IdP is not supported when you have multiple accounts or ENTs. This is because the Sign-On URL is different for each account, or ENT. > - You cannot configure both non-EU and EU Whatfix accounts simultaneously via SSO login since the ACS URL domain is different for non-EU and EU accounts. > [!NOTE] > Info: > > - SSO users can't see the **Forgot Password** option in the admin menu. All password changes need to be performed at the Identity Provider level. > - Every time a user clicks **Sign In with SSO**, they are redirected to their Identity Provider's login page. > - Currently, Whatfix does not support SLO (Single Log Out). When a user signs out of a Whatfix account, it does not log them out of the IdP. > - The user has to provide configuration parameters for Whatfix to establish an interface with their identity provider.