About single sign-on
Last updated April 1st, 2024
Simplify user access management by setting up single sign-on (SSO) for use with Samsung Knox services.
As a super admin, you can reduce the administrative burden on your IT department by managing all users through your identity management portal. Users can authenticate with just one set of credentials to quickly access Knox services.
Once SSO is set up for your Samsung Knox tenant, any sub-admins that you invite can only use their SSO credentials to sign in. The Samsung account and SSO sign-in methods can’t be used together.
Supported services
Currently, customers can set up SSO to sign in to the following Knox services:
- Knox Configure
- Knox Mobile Enrollment
- Knox E-FOTA
- Knox Manage
- Samsung Care+ for Business
- Knox Partner Program (Knox Deployment Program, Knox MSP Program)
If your Knox account is subscribed to a Knox service other than those listed above, the SSO settings are disabled for your account.
Supported account types
Currently, SSO authentication is supported for Microsoft Azure AD, Ping Identity, and Okta accounts.
For Microsoft Azure AD integrations, all users signing in to Samsung Knox must be associated with:
- A licensed Office 365 mailbox
- A shared Office 365 mailbox
If you’re signing in with a shared mailbox, make sure credentials are enabled for the mailbox.
Any accounts associated with distribution groups must first be converted to a licensed user or shared mailbox. Distribution accounts can’t be used to access the Knox Admin Portal once SSO is set up for your organization.
A user’s Samsung account email address must also match the email address they signed up for the Knox Admin Portal with, otherwise they are blocked from accessing Knox services. To change a Samsung account to match the Knox account, see:
- How can I change my email address registered in the Samsung Knox system?
- How to change a super admin in Samsung Knox Cloud Services
Before you begin
To start configuring SSO settings, you first need to register for a Samsung Knox account.
Additionally, make sure your Knox account is registered as your organization’s primary administrator, also known as a super admin. To learn more about super admins, see:
- Manage admins and roles in Knox Configure.
- Invite and manage admins in Knox Mobile Enrollment.
- Manage roles in Knox E-FOTA.
- Add an administrator in Knox Manage.
- Manage admins and roles in Samsung Care+ for Business.
Configure your SSO settings
Samsung Knox can be set up for use with several IdPs. For detailed steps on how to integrate Knox services with your specific IdP, see:
- Configure Microsoft Azure AD SSO settings
- Configure Ping Identity SSO settings
- Configure Okta SSO settings
For information on how to configure with an IdP not listed here, please refer to its documentation.
On this page
Is this page helpful?