Set up another SAML SSO provider for 8x8 Admin Console

Use Other SAML SSO Provider for any SAML 2.0 identity provider that does not have a dedicated option in 8x8. This includes providers such as OneLogin and PingOne (Ping Identity).

Users are matched to their 8x8 account by Federation ID. By default, this is the user's 8x8 username. If your provider sends a different identifier, populate the Federation ID field on each user record with that exact value. See Identity mapping on the Set up Single Sign-On for 8×8 Admin Console page and Configure Federation ID or Google ID in user records.

Prerequisites

Set up the 8x8 application in your identity provider and obtain the necessary parameters directly on the provider's platform. For detailed instructions, consult your identity provider's documentation. You will need to retrieve the following details from your provider to configure in 8x8:

• The sign-in URL (the provider's SAML 2.0 endpoint)

• The issuer URL

• The sign-out URL (optional)

• The SAML signing certificate, in PEM format

If your provider asks for an 8x8 Assertion Consumer Service (ACS) URL or Entity ID, use https://sso.8x8.com/sam12.

Add another SAML SSO provider in 8x8 Admin Console

1. Sign in to 8x8 Admin Console.

2. Go to Home > Identity and Security.

3. Enable Single Sign-On (SSO).

4. Click + Add SSO.

5. In the Add a new Single Sign-On (SSO) integration window:

   1. Select Other SAML SSO Provider as the identity provider.

   2. Optional: Turn on Set this provider as default.

   3. Under Label your provider, provide a distinct descriptive name for this provider. This label identifies the provider when admins assign it to users, so clear names prevent confusion.

   4. Sign-in page URL: Paste your provider's SAML 2.0 sign-in endpoint.

   5. IDP Issuer URL/URN: Paste your provider's issuer URL.

   6. Sign-out page URL (optional): Paste your provider's sign-out endpoint. To return users to the 8x8 sign-in page after they sign out, append the {8x8Logout} variable.

   7. Certificate in use: Attach your provider's signing certificate in PEM format.

6. Click Add.

7. Click Save on the Identity and Security page.