Single Sign-On

Configure single sign-on (SSO) authentication for IceHrm.

Overview

IceHrm supports multiple single sign-on methods, allowing users to authenticate using their existing corporate credentials:

• LDAP: Authenticate against your organization's LDAP directory
• SAML (Okta): Use Okta as your identity provider with SAML 2.0
• Azure AD: Integrate with Microsoft Azure Active Directory

Choosing an SSO Method

• LDAP: Best for organizations with an existing LDAP directory (Active Directory, OpenLDAP)
• SAML (Okta): Best for organizations using Okta for identity management
• Azure AD: Best for organizations using Microsoft 365 or Azure services

📄️ Using LDAP

IceHrm supports LDAP (Lightweight Directory Access Protocol) integration, allowing users to authenticate using their corporate directory credentials.

📄️ Sign-In with SAML (Okta)

IceHrm supports Single Sign-On (SSO) using SAML 2.0. This guide walks you through configuring Okta as your identity provider for IceHrm authentication.

📄️ Microsoft Entra ID (Azure AD)

This documentation is applicable only for IceHrm Open Source.