Single sign-on configuration

Note: SSO for applications is available only with the Endpoint MFA.

ADSelfService Plus single sign-on (SSO) eliminates the need for multiple user IDs and passwords, streamlines login experience of users, and improves security. It uses Active Directory credentials to verify users’ identities, and OU- and group-based policies to control access to various cloud applications.

ManageEngine ADSelfService Plus supports two widely used SSO protocols:

• SAML
• OAuth/OpenID Connect

All user activities when accessing applications via SSO are logged in the Application Access Audit Report.