--- title: SSO integration process with the Portal description: The XMCO Portal supports the integration of external SSO using the OpenID Connect protocol. This protocol allows the Portal to delegate the entire authentication process of your employees to a component controlled within your information system. --- [Skip to content](https://content.xmco.fr/en/base-de-connaissances/sso-integration-process#main-content) - [English](https://content.xmco.fr/en/base-de-connaissances/sso-integration-process) - [Français](https://content.xmco.fr/fr/base-de-connaissances/processus-integration-sso) English Show submenu for translations ![](https://content.xmco.fr/hubfs/xmco.svg) - [View your tickets](https://content.xmco.fr/tickets-view) - [Log out](https://content.xmco.fr/_hcms/mem/logout) Open main navigation Close main navigation - [View your tickets](https://content.xmco.fr/tickets-view) - [Log out](https://content.xmco.fr/_hcms/mem/logout) - - [English](https://content.xmco.fr/en/base-de-connaissances/sso-integration-process) - [Français](https://content.xmco.fr/fr/base-de-connaissances/processus-integration-sso) English Show submenu for translations - [Contact support](https://content.xmco.fr/en/support) [Contact support](https://content.xmco.fr/en/support?hsLang=en) How can we help you? - There are no suggestions because the search field is empty. 1. [Base de connaissances](https://content.xmco.fr/en/base-de-connaissances?hsLang=en) 2. [Set up your account and company](https://content.xmco.fr/en/base-de-connaissances/set-up-your-account-and-company?hsLang=en) 3. [Integrate your SSO](https://content.xmco.fr/en/base-de-connaissances/set-up-your-account-and-company?hsLang=en#integrate-your-sso) # SSO integration process with the Portal ### **Introduction** The XMCO Portal supports the integration of external SSO using the **OpenID Connect protocol**. This protocol allows the Portal to delegate the entire authentication process of your employees to a component controlled within your information system. The Portal does not have any knowledge of your employees' authentication secrets (passwords, certificates, additional authentication factors, etc.). This allows you to continue to manage their accounts in a centralized manner. To date, only the **OpenID** **Connect** protocol is supported. **SAML** protocol support is not planned. > **What is SSO ?**   > > Single Sign-on (SSO) is a session and user authentication service that allows a user to use one set of credentials (e.g. name and password) to access multiple applications. Single Sign-On (SSO) is a great feature for organizations that want to allow their users to log into multiple applications with a single authentication. ### How to set it up Regardless of the technological component in place in your company, the principle remains the same. Integration into the Portal requires the creation of an **OpenID client** within your SSO. > Below are guides for the most common SSO technologies on the market. If the component you are using is not listed in the guides, our teams will do their best to assist you in case of difficulties.   Creating an **OpenID client** in your SSO requires one key piece of information: **the redirection URL**. This is the URL of the Portal to which your SSO will redirect your collaborator once the authentication is successful. This URL must be declared in your SSO for security reasons. The URL that you must enter is the following: **[https://leportail.xmco.fr/api/account/oicd/callback](https://leportail.xmco.fr/api/account/oicd/callback)** Once the OpenID client is created, you will get the following information: - The Server Metadata URL - This usually ends with **/.well-known/openid-configuration.** - It allows the Portal to obtain a list of URLs required for the **OpenID Connect** protocol to function properly. - The Client ID - Depending on the SSO used, this can be an arbitrarily defined name or a sequence of random characters. - The Client Secret - This secret is a sequence of random characters and is used during certain exchanges with the SSO. Once you have all this information, we invite you to **share it with our teams** (support@xmco.fr). **We need it to finalize the SSO implementation.** ### **Guides for creating an OpenID client** The following guides detail the different steps required to create an OpenID client depending on the technology used to set up your SSO. - [Okta](https://content.xmco.fr/fr/base-de-connaissances/creating-an-openid-client-with-okta?hsLang=en) - [Microsoft Azure AD](https://content.xmco.fr/fr/base-de-connaissances/creating-an-openid-client-with-microsoft-azure-ad?hsLang=en) - [Microsoft AD FS](https://content.xmco.fr/fr/base-de-connaissances/creating-an-openid-client-with-microsoft-ad-fs?hsLang=en) If the SSO technology used in your company is not on this list or you are experiencing difficulties, please contact our teams. ### **Frequently asked questions** > Is it possible to keep a few non-federated users in SSO? Unfortunately No. At present, it's not possible to keep a few unregistered users. The configuration applies to the whole company.   > Will SSO only be applied to users whose email corresponds to a certain domain? Or to all users? SSO will be applied to all company accounts. So if some accounts in the Portal are not referenced in your active directory (AD, ADFS, AzureAD / Entra, keycloack, Okta...), the accounts in question will no longer be able to connect to the Portal. > Is SCIM supported ? Unfortunately No. At present, we do not support SCIM. - [Set up your account and company](https://content.xmco.fr/en/base-de-connaissances/set-up-your-account-and-company?hsLang=en#main-content) - [Log in](https://content.xmco.fr/en/base-de-connaissances/set-up-your-account-and-company?hsLang=en#log-in) - [Integrate your SSO](https://content.xmco.fr/en/base-de-connaissances/set-up-your-account-and-company?hsLang=en#integrate-your-sso) - [Manage your account](https://content.xmco.fr/en/base-de-connaissances/set-up-your-account-and-company?hsLang=en#manage-your-account) - [Manage your company](https://content.xmco.fr/en/base-de-connaissances/set-up-your-account-and-company?hsLang=en#manage-your-company) - [Discover the Serenety module](https://content.xmco.fr/en/base-de-connaissances/discover-the-serenety-module?hsLang=en#main-content) - [Documentation Serenety](https://content.xmco.fr/en/base-de-connaissances/discover-the-serenety-module?hsLang=en#documentation-serenety) - [Set up Serenety in just a few clicks](https://content.xmco.fr/en/base-de-connaissances/discover-the-serenety-module?hsLang=en#set-up-serenety-in-just-a-few-clicks) - [Serenety key features](https://content.xmco.fr/en/base-de-connaissances/discover-the-serenety-module?hsLang=en#serenety-key-features) - [Discover Yuno](https://content.xmco.fr/en/base-de-connaissances/discover-yuno?hsLang=en#main-content) - [Set up Yuno in just a few clicks](https://content.xmco.fr/en/base-de-connaissances/discover-yuno?hsLang=en#set-up-yuno-in-just-a-few-clicks) - [Advanced settings](https://content.xmco.fr/en/base-de-connaissances/discover-yuno?hsLang=en#advanced-settings) - [Yuno's main pages](https://content.xmco.fr/en/base-de-connaissances/discover-yuno?hsLang=en#yunos-main-pages) - [FAQ](https://content.xmco.fr/en/base-de-connaissances/discover-yuno?hsLang=en#faq) - [Download the complete documentation](https://content.xmco.fr/en/base-de-connaissances/discover-yuno?hsLang=en#download-the-complete-documentation) - [Use the API and connectors](https://content.xmco.fr/en/base-de-connaissances/use-the-api-and-connectors?hsLang=en#main-content) - [Understanding and using the Portal API](https://content.xmco.fr/en/base-de-connaissances/use-the-api-and-connectors?hsLang=en#understanding-and-using-the-portal-api) - [Connect to our Portal](https://content.xmco.fr/en/base-de-connaissances/use-the-api-and-connectors?hsLang=en#connect-to-our-portal) - [Legal information](https://content.xmco.fr/en/base-de-connaissances/legal-information?hsLang=en) [![](https://content.xmco.fr/hubfs/xmco.svg)](https://www.xmco.fr) [mailto:support@xmco.fr](mailto:support@xmco.fr) Copyright © 2026, XMCO