About single sign-on
Last updated October 25th, 2023
Simplify user access management by setting up single sign-on (SSO) for use with Samsung Knox services.
As a super admin, you can reduce the administrative burden on your IT department by managing all users through your identity management portal. Users can authenticate with just one set of credentials to quickly access Knox services.
Note that once SSO is set up for your Samsung Knox tenant, any sub-admins that you invite can only use their SSO credentials to sign in. The Samsung account and SSO sign-in methods cannot be used together.
Supported services
Currently, customers can set up SSO to sign in to the following Knox services:
- Knox Configure
- Knox Mobile Enrollment
- Knox E-FOTA
- Knox Manage
- Samsung Care+ for Business
- Knox Partner Program (Knox Deployment Program, Knox MSP Program)
Important
If your Knox account is subscribed to a Knox service other than those listed above, the SSO settings are disabled for your account.
Supported account types
Currently, SSO authentication is supported for Microsoft Azure AD, Ping Identity, and Okta accounts.
For Microsoft Azure AD integrations, all users signing in to Samsung Knox must be associated with:
- A licensed Office 365 mailbox
- A shared Office 365 mailbox
If you’re signing in with a shared mailbox, make sure credentials are enabled for the mailbox.
Any accounts associated with distribution groups must first be converted to a licensed user or shared mailbox. Distribution accounts cannot be used to access the Knox Admin Portal once SSO is set up for your organization.
A user’s Samsung account email address must also match the email address they signed up for the Knox Admin Portal with, otherwise they are blocked from accessing Knox services. To change a Samsung account to match the Knox account, see:
- How can I change my email address registered in the Samsung Knox system?
- How to change a super admin in Samsung Knox Cloud Services
Before you begin
To start configuring SSO settings, you first need to register for a Samsung Knox account.
Additionally, make sure your Knox account is registered as your organization’s primary administrator, also known as a super admin. To learn more about super admins, see:
- Manage admins and roles in Knox Configure.
- Invite and manage admins in Knox Mobile Enrollment.
- Manage roles in Knox E-FOTA.
- Add an administrator in Knox Manage.
- Manage admins and roles in Samsung Care+ for Business.
Configure your SSO settings
Samsung Knox can be set up for use with several identity management providers. See below for detailed steps on how to integrate Knox services with your specific provider.
Is this page helpful?