SSO
SAML 2.0 and OIDC single sign-on for enterprise teams
WarpBuild supports enterprise single sign-on via SAML 2.0 and OIDC (OpenID Connect). It works with all major identity providers - Okta, Microsoft Entra ID (formerly Azure AD), Google Workspace, Auth0, Microsoft AD FS, OneLogin, PingOne, JumpCloud, Rippling, and any SAML 2.0 or OIDC-compliant provider.
Setup is self-serve: once SSO is enabled for your organization, you configure your own identity provider through a guided wizard and manage the connection yourself.
Enabling SSO
SSO is available on enterprise plans. To get started, email [email protected]. We provision SSO for your organization and send you a one-time setup link to configure your identity provider.
Setting up SSO
Open your setup link and choose a protocol
Open the setup link we sent you - no WarpBuild login is required; Choose how your identity provider connects:
- SAML 2.0 - supported by Okta, Entra ID, Google Workspace, JumpCloud, and most enterprise IdPs.
- OIDC / OpenID Connect - supported by Auth0, Okta, Entra ID, Keycloak, and OIDC-compliant providers.
Configure your identity provider
Create a SAML application in your IdP and register the service-provider details shown in the wizard:
| Field | Also called |
|---|---|
| ACS URL | Single Sign-On URL, Reply URL |
| Entity ID | SP Entity ID, Audience URI |
Configure your IdP to emit these assertion attributes (names are case-sensitive):
| SAML attribute | WarpBuild field |
|---|---|
NameID (subject) | id |
email | |
givenName | firstName |
surname | lastName |
Create an OIDC / OAuth 2.0 web application in your IdP and register the Redirect URI shown in the wizard as an allowed redirect. Then enter your connection details:
- Issuer URL - your IdP's base URL. WarpBuild auto-discovers endpoints from
{issuer}/.well-known/openid-configuration. - Client ID
- Client Secret
Client authentication method
Set your application's client authentication to Client Secret Basic.
Create the SAML connection
Tell WarpBuild how to reach your identity provider by providing your SAML metadata using any one of these methods:
- Metadata URL - a link to your IdP's metadata XML; WarpBuild fetches it automatically.
- Metadata XML - paste the raw XML exported from your IdP.
- Manual - enter the IdP SSO URL and X.509 signing certificate by hand.
Submit to validate and save the connection - SSO is now live for your organization.
Using OIDC? Your connection is completed in the previous step - skip ahead to sign in.
Sign in
Once setup is complete, your team signs in by entering your tenant name on the WarpBuild login page.
Last updated on