Set up Single Sign-On for 8x8 Admin Console

Single Sign-On(SSO) is an authentication service that allows users to access multiple applications using a single set of login credentials, such as their company username and password. Once authenticated, users can switch between authorized 8x8 applications without re-entering credentials.

Organizations that use identity management systems such as Google SSO, Microsoft Azure AD, Okta, or any SAML-compliant provider can configure SSO in 8x8 Admin Console. This enables employees to log in using their corporate identity rather than a separate 8x8 username and password.

With support for Federated SSO, users can securely log in to 8x8 applications through their company’s existing identity and security infrastructure.

Key features

  • Easy setup: Configure SSO directly from the user’s profile in 8x8 Admin Console.

  • Simplified access: Users no longer need to remember or enter separate 8x8, Inc. credentials.

  • Faster sign-in: Reduces login time across all 8x8, Inc. apps.

  • Enhanced security: Credentials are stored and managed only by the organization’s identity provider.

  • Seamless experience: Users can access 8x8, Inc. apps directly from other authenticated systems.

Identity Mapping

Each company user must be mapped to an 8x8 user account to enable federated authentication.

If your organization’s 8x8 usernames are not unique email addresses, configure one of the following identity attributes in 8x8 Admin Console:

  • For SAML SSO: Use Federated ID.
  • For Google SSO: Use Google ID.

This ensures proper identity matching between your organization’s identity provider and.

Configure Federated SSO

Configuring access to 8x8 applications through Federated Single Sign-On (SSO) involves setting up a SAML-based connection between your company’s identity provider and 8x8 Admin Console.

Security Assertion Markup Language (SAML) allows identity providers (IdP)to pass authorization credentials securely to service providers like 8x8, Inc..

SAML enables seamless authentication across systems without requiring users to log in multiple times.

Note: The SAML configuration process varies depending on your chosen identity provider. Contact your company administrator to confirm which IdP your organization uses. This step is typically managed by your IT or security team.

Provider-Specific Setup

Okta

  • Search for 8x8 in the Okta Application Catalog and add it.
  • Follow the SAML 2.0 setup instructions for 8x8 users whose Okta usernames match their 8x8 usernames.
  • For users without matching usernames, the Federated ID field is populated in 8x8 Admin Console.

To learn more, see Configuring Okta SAML 2.0 SSO for 8x8 Admin Console.

OneLogin

  • Search for 8x8 in the OneLogin Application Catalog.
  • Under Configuration > Connectors, select Connector Version: SAML 2.0.

To learn more, see Configuring OneLogin SAML 2.0 SSO for Admin Console.

Azure AD

  • Search for 8x8 in the Azure AD Enterprise App Gallery.
  • Follow Microsoft’s configuration steps to connect your 8x8, Inc. service via SAML 2.0.

To learn more, see Azure (Entra) AD: 8x8 Single Sign-On (SSO) and User Provisioning (SCIM) Configuration.

Administrators can set up Single Sign-On (SSO) and specify which identity provider (IdP) their organization uses to authenticate users.

To begin:

  1. Go to Home > Identity and Security.

    Switch on the Single Sign-On (SSO) toggle to enable the integration.

  2. Select your identity provider from the list — Google SSO, Azure, Okta, or Other SAML SSO Provider.

  3. Follow the configuration steps for your chosen provider below.

Allows users to sign in to 8x8, Inc. applications using their Google ID.

To configure Google SSO:

  1. Go to Home > Identity and Security.

  2. Select Single Sign on (SSO) as your authentication method.

  3. Choose Google as your SSO provider.
  4. Click Save.

Note: Users can choose to log in with either their 8x8, Inc. credentials or Google ID when both options are enabled.

8x8 Admin Console Single Sign-On Integration (SSO) page showing Google selected as the identity provider under the Identity and Security settings

Allows users to log in to any 8x8 application using their corporate Azure AD credentials.

To configure Microsoft Azure AD provider:

  1. Go to Home > Identity and Security.
  2. Select Single Sign on (SSO) as your authentication method.
  3. Select Microsoft Azure AD as your SSO provider.

  4. Enter the following details from your Identity Provider (IdP):

    • Sign-in page URL: The authentication URL provided by your IdP.

    • Sign-out page URL: The logout URL that ends the IdP session (to redirect users upon signing out).

      • Append the <{8x8Logout}> variable if your IdP can redirect after logout to insert the 8x8 login page, allowing the user to log in again later.

    • IDP Issuer URL/URN: The identifier for your IdP (sometimes called IDP identifier URL/URN).

  5. .Upload the SAML signing certificate from Azure AD (Base64 format) under Certificate in use.
  6. Click Save to complete the configuration. 

8x8 Admin Console Single Sign-On Integration (SSO) page showing Microsoft Azure AD selected as the identity provider with fields for SAML settings, including sign-in URL, sign-out URL, and certificate upload

Allows users sign in to 8x8 applications .using their Okta Federated ID.

To configure Okta SSO:

  1. Go to Home > Identity and Security.
  2. Select Single Sign on (SSO) as your authentication method.
  3. ChooseOkta as your SSO provider.

  4. Enter the following information from your Okta configuration:

    • Sign-in page URL: The authentication URL from Okta.

    • Sign-out page URL: The logout URL that ends the IdP session (to redirect users upon signing out).

      • Append the <{8x8Logout}> variable if your IdP can redirect after logout to insert the 8x8 login page, allowing the user to log in again later.

      • Example:
        https://YOUR_COMPANY.okta.com/login/signout?fromURI={8x8Logout}

    • IDP Issuer URL/URN: The Okta issuer identifier (sometimes called IDP identifier URL/URN).

  5. Upload the SAML certificate file (.cert, .cer, or .crt) under Certificate in use.

  6. Save your changes.

    7. 8x8 Admin Console Single Sign-On Integration (SSO) page showing Okta selected as the identity provider, with input fields for SAML settings including sign-in URL, sign-out URL, and certificate upload

Supports any other SAML 2.0–compliant identity provider.

If your SAML provider requests an 8x8 URL, use: https://sso.8x8.com/saml2

To configure Single Sign-On for other SAML SSO Provider:

  1. Go to Home > Identity and Security.
  2. Select Single Sign on (SSO) as your authentication method.
  3. ChooseOther SAML SSO Provider as your SSO provider.

  4. Enter your IdP details:

    • Sign-in page URL: The login redirect from your IdP.

    • Sign-out page URL:The logout redirect from your IdP.

      • You can append the <{8x8Logout}> variable for return-to-login behavior

    • IDP Issuer URL/URN: The identifier for your IdP (sometimes called IDP identifier URL/URN).

  5. Upload the SAML signing certificate under Certificate in use.

  6. Cick Save to complete your setup.

8x8 Admin Console Single Sign-On Integration (SSO) page showing Other SAML SSO Provider selected with fields for provider name, SAML settings, sign-in and sign-out URLs, and certificate upload

Configuration complete

Once configured, users can log in to 8x8 applications using their organization’s selected SSO provider.

Admins can also enable User Provisioning Integration (SCIM) to automate user management.

For detailed setup guidance, see Set up User Provisioning Integration (SCIM).

This step is optional. If your company does not use unique email addresses for 8x8 usernames, then you must map 8x8 Work users to their Federation ID (for SAML) or Google ID (for Google) in the user records.

You have three options for adding/updating the Google ID/Federation ID in user records:

  • Provide the Google ID/Federation ID in the CSV file during bulk user creation only.
  • Provide the Google ID/Federation ID when a single user is created manually.
  • Provide the Google ID/Federation ID when editing a single user manually.

To define Federation ID or Google ID in a user record:

  1. Go to Home > Users.
  2. Select a user record to edit. Based on the choice of the identity provider, the corresponding mapping field shows under Single Sign-On (SSO):
    • For Okta and SAML, the Federated ID field is available. Populate the Federated ID.
    • For Google, the Google ID field is available. Populate the Google ID.
  3. Save your changes.

You can also define Federated ID or Google ID while creating users in bulk.

To define Federation ID or Google ID while creating user records in bulk:

  1. Go to Home > Users.
  2. Click Bulk Upload.
  3. Download the advanced user template in the CSV format. The template opens in Excel.
  4. Look for columns User.FederationID and User.GoogleID, add the user data, and save the CSV file.
  5. Go to the Users page in 8x8 Admin Console. Click Bulk Upload.
  6. Drag and drop the CSV file and click Save.

Sign in Using Federated SSO

The sign-in process for 8x8 applications is similar whether it is authenticated via SAML or Google. The initial sign-in process takes users through the 8x8 Work login page. Go to the 8x8 SSO login page, or launch the 8x8 Work for Desktop.

  1. In the login screen, click Use Single Sign On.

    The SSO login prompt opens.
  2. Enter your 8x8 username or company email for validation.
  3. Click Continue to view your SSO options.
  4. Click Log in using SAML to open your identity provider's login page.
    OR
    Click Log in using Google to open the Google login page.

    Note: Clicking Clear SSO Setting takes you back to the first login page.

  5. When prompted, click Allow to enable Adobe Flash Player settings to access your camera and/or microphone.
    1. If you selected Log in using SAML, your company's identity provider login page opens.

      Note: If you log in using Okta or Centrify, the login page opens in a new browser tab instead of in the application window. Until you log in, the application window reads Login from browser....

    2. Enter the credentials to log in to the identity provider.
      The 8x8 application launches.
  1. If you selected Log in using Google, the Google login page opens.
  2. Enter your company Gmail address and password.
  3. Click Allow to grant 8x8 SSO access to your Gmail profile.

    You are now authenticated to your 8x8 app. The application launches.