Configuring SAML Single Sign-On in 0patch Central

0patch Central supports single sign-on using SAML. While it should be possible to configure SAML for 0patch login with any identity provider, we have prepared detailed instructions for some of the most widely used IDPs:

• Configuring Okta SAML Single Sign-On to 0patch Central
• Configuring Microsoft Entra ID SAML Single Sign-On to 0patch Central
• Configuring OneLogin SAML Single Sign-On to 0patch Central
• Configuring Ping Identity SAML Single Sign-On to 0patch Central

Notes:

1. To allow login with SAML, make sure that "Single sign-on" is enabled under ACCOUNT -> SECURITY -> AUTHENTICATION OPTIONS.
2. In order to login with SAML, a user with the chosen email address must exist in your 0patch account and must be active (not just invited, and not disabled). If you have SCIM provisioning configured, this will automatically be taken care of.
3. If SAML is going to be the only login method for the user, please select a long complex password for the user and do not store it in a password manager or write it down.
4. SAML Just-In-Time provisioning is not supported: new 0patch accounts cannot get automatically created by logging in with SAML. (SCIM provisioning is supported.)