Back to top

About single sign-on

Last updated April 1st, 2024

Simplify user access management by setting up single sign-on (SSO) for use with Samsung Knox services.

As a super admin, you can reduce the administrative burden on your IT department by managing all users through your identity management portal. Users can authenticate with just one set of credentials to quickly access Knox services.

Once SSO is set up for your Samsung Knox tenant, any sub-admins that you invite can only use their SSO credentials to sign in. The Samsung account and SSO sign-in methods can’t be used together.

Supported services

Currently, customers can set up SSO to sign in to the following Knox services:

If your Knox account is subscribed to a Knox service other than those listed above, the SSO settings are disabled for your account.

Supported account types

Currently, SSO authentication is supported for Microsoft Azure AD, Ping Identity, and Okta accounts.

For Microsoft Azure AD integrations, all users signing in to Samsung Knox must be associated with:

  • A licensed Office 365 mailbox
  • A shared Office 365 mailbox

If you’re signing in with a shared mailbox, make sure credentials are enabled for the mailbox.

Any accounts associated with distribution groups must first be converted to a licensed user or shared mailbox. Distribution accounts can’t be used to access the Knox Admin Portal once SSO is set up for your organization.

A user’s Samsung account email address must also match the email address they signed up for the Knox Admin Portal with, otherwise they are blocked from accessing Knox services. To change a Samsung account to match the Knox account, see:

Before you begin

To start configuring SSO settings, you first need to register for a Samsung Knox account.

Additionally, make sure your Knox account is registered as your organization’s primary administrator, also known as a super admin. To learn more about super admins, see:

Configure your SSO settings

Samsung Knox can be set up for use with several IdPs. For detailed steps on how to integrate Knox services with your specific IdP, see:

For information on how to configure with an IdP not listed here, please refer to its documentation.

Is this page helpful?