About identity provider setup
Last updated June 26th, 2024
Simplify user access management by setting up your identity provider for use with Samsung Knox services.
As a super admin, you can reduce the administrative burden on your IT department by managing all users through your identity management portal. Users can authenticate with just one set of credentials to quickly access Knox services.
Once you’ve connected an identity provider to your Samsung Knox tenant, any sub-admins that you invite can only use credentials from the identity provider to sign in. The Samsung account and identity provider sign-in methods can’t be used together.
Supported services
Currently, customers can set up an identity provider to sign in to the following Knox services:
- Knox Configure
- Knox Mobile Enrollment
- Knox E-FOTA
- Knox Manage
- Samsung Care+ for Business
- Knox Partner Program (Knox Deployment Program, Knox MSP Program)
If your Knox account is subscribed to a Knox service other than those listed above, the idnetity provider settings are disabled for your account.
Supported account types
Currently, identity provider authentication is supported for Microsoft Entra, Ping Identity, and Okta accounts.
For Microsoft Entra integrations, all users signing in to Samsung Knox must be associated with:
- A licensed Office 365 mailbox
- A shared Office 365 mailbox
If you’re signing in with a shared mailbox, make sure credentials are enabled for the mailbox.
Any accounts associated with distribution groups must first be converted to a licensed user or shared mailbox. Distribution accounts can’t be used to access the Knox Admin Portal once an identity provider is set up for your organization.
A user’s Samsung account email address must also match the email address they signed up for the Knox Admin Portal with, otherwise they are blocked from accessing Knox services. To change a Samsung account to match the Knox account, see:
- How can I change my email address registered in the Samsung Knox system?
- How to change a super admin in Samsung Knox Cloud Services
Before you begin
To start configuring identity provider settings, you first need to register for a Samsung Knox account.
Additionally, make sure your Knox account is registered as your organization’s primary administrator, also known as a super admin. To learn more about super admins, see:
- Manage admins and roles in Knox Configure.
- Invite and manage admins in Knox Mobile Enrollment.
- Manage roles in Knox E-FOTA.
- Add an administrator in Knox Manage.
- Manage admins and roles in Samsung Care+ for Business.
Configure your identity provider settings
Samsung Knox can be set up for use with several identity providers. For detailed steps on how to integrate Knox services with your specific identity provider, see:
For information on how to configure with an identity provider not listed here, please refer to its documentation.
On this page
Is this page helpful?