Menu
Samsung Knox logo with shield, lock, wrench, briefcase, key, cog, and wireless symbols

Sign in with SSO

Simplify user access management by setting up single sign-on (SSO) for use with Samsung Knox services.

As a super admin, you can reduce the administrative burden on your IT department by managing all users through your identity management portal. Users can authenticate with just one set of credentials to quickly access Knox services.

Note that once SSO is set up for your Samsung Knox tenant, any sub-admins that you invite can only use their SSO credentials to log in. The Samsung Account and SSO sign-in methods cannot be used together.

Audience

This document is intended for IT admins. Learn how to seamlessly integrate your identity management solution with the Knox portal and its services in just a few steps, and leverage the SSO system for access to Knox solution consoles.

Supported services

Currently, customers can set up SSO to sign in to the following Knox services:

NOTE — If your Knox account is subscribed to a Knox service other than those listed above, the SSO settings are disabled for your account.

Supported account types

Currently, SSO authentication is supported for Microsoft Azure AD, Ping Identity, and Okta accounts.

For Microsoft Azure AD integrations, all users logging into Samsung Knox must be associated with:

  • A licensed Office 365 mailbox
  • A shared Office 365 mailbox

If you're logging in with a shared mailbox, make sure login credentials are enabled for the mailbox.

Any accounts associated with distribution groups must first be converted to a licensed user or shared mailbox. Distribution accounts cannot be used to access the Samsung Knox portal once SSO is set up for your organization.

NOTE—A user's Samsung account email address must also match the email address they signed up for the Samsung Knox portal with, otherwise they are blocked from accessing Knox services. To change a Samsung account to match the Knox account, see:

Before you begin

Make sure your Knox portal account is registered as your organization's primary administrator, also known as a super admin. To learn more about super admins, see:


Start the tutorial >>