Using SAML you can streamline access to Start.me, by enabling users to log in with their existing work accounts. Whether you're utilizing Okta, OneLogin, JumpCloud, Azure AD FS, or another IdP, integration is straightforward.

SAML is an XML-based open standard data format for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider. This integration provides single sign-on for SAML and Start.me, allowing you to use your SAML credentials to authenticate in Start.me.

To configure a new SAML2 integration, go to your Team admin panel → Authentication & SSO tab → SSO section → click Add.

While adding a new IdP you can select one of the popular IdP's:

Some IdPs allow you to automatically configure the SAML2 integration by a metadata file. You can get the Start.me metadata file by going to the Metadata URL mentioned below.

Example SAML-envelope:

Go to your Team admin panel → Authentication & SSO tab and click Configure (via the three-dot menu) next to the IdP you created in step 1. Here you can upload the metadata file generated by the IdP. The following fields need to be specified:

You can configure the look and feel of the Login button that will be shown to users on the sign-in screen of your team portal.

After you have configured your IdP, you can test the login flow by clicking Open test page in the three-dot menu next to your IdP.

This will open a new browser window with test instructions. You will need to copy the URL and open it in a new Incognito Window.

After you configured your IdP, you can select it as the default login method and thereby bypass the Start.me login screen for your users. Instead of the Start.me login screen, users will immediately be redirected to the IdP login screen.

You can automatically assign users to the correct Enterprise teams based on their group memberships in your IdP. See Automatically Assign Users to Enterprise Teams via SSO for setup instructions.