Configuring Single Sign-On

To configure SSO, choose the protocol used by your identity provider:

During provisioning, KACE Cloud (KACE Cloud) creates a local account. Most customers elect to manage KACE Cloud by corporate account with single sign-on (SSO) enabled. If your corporate directory is not configured for SSO, or you do not have LDAP in place, you may continue to use a local account managed by KACE Cloud.

NOTE: If user role assignment is set to Automatic during SSO Configuration, a manual attempt to update an individual user's role via the Users > Edit User path may appear possible, but will be overwritten by the original SSO Configuration. To resolve, the configuration setting can be changed to Manual, which will then enable editing of individual user roles.

To configure SSO, choose the protocol used by your identity provider:

• SAML: Integrate with Active Directory Federation Services
• SAML: Integrate with Microsoft Azure AD
• SAML: Integrate with Google G Suite
• SAML: Integrate with Okta
• Integrate with OpenID Connect (OIDC) and Azure AD

See Troubleshooting Single Sign-On.