Single sign-on for UserVoice with SAML, OIDC or JWT

UserVoice supports single sign-on with SAML 2.0, OpenID Connect and JSON Web Tokens, so your team can sign in through the identity provider you already use. We have setup guides for Okta, Microsoft Entra ID, ADFS and OneLogin, and any SAML 2.0 or OIDC provider works with the generic setup.

Book a demo Read the setup guide

How it connects

Identity provider

Authenticates the person

SAML, OIDC or JWT

Identity and required attributes

UserVoice

Access to the portal or admin

SAML 2.0

Plus OpenID Connect and JWT

Multiple

Providers can be configured

Sign-in

Licenses are managed with SCIM

Sign-in that fits your security policy

Use the right protocol

UserVoice supports SAML 2.0 and OpenID Connect with any compliant provider, JWT single sign-on for homegrown systems, and built-in Google, Microsoft, Facebook and Slack sign-in. You can configure several providers.

Configure OneLogin

Use OneLogin's UserVoice SAML app, your subdomain, an SSO endpoint and an X.509 signing certificate.

Configure ADFS

Set up a relying party trust with UserVoice metadata, the required email claim and a token signing certificate.

A good fit for

Security and IT teams standardizing sign-in.

See how the UserVoice MCP works

Set up with your identity team

Read the setup guide

Choose provider and scope

Confirm the identity provider, portal or admin scope and security policy, then follow its guide.

Exchange metadata

Configure the provider's app or relying party trust, then add the SSO endpoint and certificate in User Authentication.

Test access both ways

In a separate browser session, confirm an assigned user can sign in and an unassigned user cannot.

Common questions

Is SSO the same as SCIM?

No. SSO handles sign-in and creates users the first time they sign in. SCIM manages licenses and deactivation.

Can we use several providers?

Yes. Multiple providers can be configured.

Which protocols are supported?

SAML 2.0 and OpenID Connect with any compliant provider, JWT single sign-on for homegrown systems, and built-in Google, Microsoft, Facebook and Slack sign-in.