Setting up SSO (SAML / OIDC)

SSO is available on Professional and Enterprise plans. Configure it once, and your team logs in through your identity provider.

Before you start

You'll need:

• Admin access in Lenavio and in your IdP
• Your IdP's metadata URL or XML
• A test user in a sandbox group (don't test on the CEO)

Okta

1. In Okta, Applications → Create App Integration → SAML 2.0.
2. Set Single sign-on URL to the value shown in Lenavio → Settings → SSO → Okta.
3. Set Audience URI to your tenant's entity ID (also shown in Lenavio).
4. In Lenavio, paste Okta's metadata URL and save.
5. Assign a test user in Okta and sign in.

Azure AD

1. In Entra, Enterprise applications → New application → Create your own.
2. Choose Non-gallery, name it Lenavio.
3. In Single sign-on → SAML, configure Basic SAML with the Identifier and Reply URL from Lenavio's SSO page.
4. Download the Federation Metadata XML, upload to Lenavio.

Google Workspace

1. Google Admin → Apps → Web and mobile apps → Add custom SAML app.
2. Copy the metadata URL into Lenavio.
3. ACS URL and Entity ID come from Lenavio's SSO page.

If anything goes wrong, email hello@lenavio.com with your workspace name and the IdP error code. Typical turnaround: under an hour.