About identity provider setup

Identity providers provide a secure and efficient user access management. You can set up identity providers for personal Samsung account to enable users to easily and securely access Knox services.

Supported account types

Currently, identity provider authentication is supported for Microsoft Entra, Ping Identity, and Okta accounts.

For Microsoft Entra integrations, all users signing in to Samsung Knox must be associated with:

• A licensed Office 365 mailbox
• A shared Office 365 mailbox

If you’re signing in with a shared mailbox, make sure credentials are enabled for the mailbox.

Any accounts associated with distribution groups must first be converted to a licensed user or shared mailbox. Distribution accounts can’t be used to access the Knox Admin Portal once an identity provider is set up for your organization.

A user’s Samsung account email address must also match the email address they signed up for the Knox Admin Portal with, otherwise they are blocked from accessing Knox services. To change a Samsung account to match the Knox account, see:

• How can I change my email address registered in the Samsung Knox system?
• How to change a super admin in Samsung Knox Cloud Services

Before you begin

To start configuring identity provider settings, you first need to register for a Samsung Knox account.

Additionally, make sure your Knox account is registered as your organization’s primary administrator, also known as a super admin. To learn more about super admins, see:

• Manage admins and roles in Knox Configure.
• Invite and manage admins in Knox Mobile Enrollment.
• Manage roles in Knox E-FOTA.
• Add an administrator in Knox Manage.
• Manage admins and roles in Samsung Care+ for Business.

Configure your identity provider settings

Samsung Knox can be set up for use with several identity providers. For detailed steps on how to integrate Knox services with your specific identity provider, see:

• Configure Microsoft Entra settings
• Configure Ping Identity settings
• Configure Okta settings

For information on how to configure with an identity provider not listed here, please refer to its documentation.