Does MiOpsAI support single sign-on (SSO)?

Yes — MiOpsAI supports SAML 2.0 and OIDC single sign-on for Agency and Enterprise+ tier customers. SSO works with all major identity providers including Microsoft Entra ID (Azure AD), Okta, Google Workspace, OneLogin, JumpCloud, and Auth0.

SSO capabilities

• SAML 2.0 for enterprise IdPs (Okta, OneLogin, Entra ID)
• OIDC for modern providers (Google Workspace, Auth0)
• Just-in-time provisioning — users created on first sign-in based on IdP attributes
• SCIM 2.0 user lifecycle — auto-deprovisioning when removed from IdP (Enterprise+ only)
• Group/role mapping — IdP groups map to MiOpsAI roles automatically
• Multi-domain support — multiple email domains under one tenant
• SSO enforcement — disable password login once SSO is verified working

Which tier do I need?

Setup process

1. From Settings → Security → SSO, choose your provider
2. MiOpsAI generates an SP metadata file or OIDC client credentials
3. Configure your IdP with the values provided (we have step-by-step guides for Okta, Entra ID, Google, Auth0, OneLogin)
4. Test sign-in with a single user before enforcing org-wide
5. Map IdP groups to MiOpsAI roles
6. Enforce SSO and disable password login

MFA without SSO

If you're on Starter or Growth, you don't get SSO but you do get TOTP-based multi-factor authentication (Google Authenticator, Authy, 1Password) for every user. We strongly recommend enforcing MFA across your team regardless of tier.

Audit and monitoring

All SSO sign-ins are logged with IP, user agent, and IdP claims. Failed authentications trigger admin alerts. See full tier comparison or request access.