Workspace & Account
SSO (SAML)
Let your team sign in through your identity provider with SAML 2.0 — Okta, Azure AD, Google Workspace, or any SAML IdP. SSO is self-serve and free.
Setup
In the dashboardWorkspace → Settings → SSO
Configure the connection with two URLs Deploxa provides. Give the ACS (Assertion Consumer Service) URL to your IdP, and point your IdP at the SP metadata URL.
| URL | Path |
|---|---|
| ACS (reply) URL | /api/sso/{orgSlug}/acs |
| SP metadata | /api/sso/{orgSlug}/metadata |
text
ACS URL: https://deploxa.com/api/sso/my-org/acs SP metadata: https://deploxa.com/api/sso/my-org/metadata
Auto-join behavior
When a user authenticates through your IdP for the first time, Deploxa creates their account and automatically adds them to your organization as a Member. Promote them to a higher role afterward if needed.
Combine SSO with email domain restriction so only people from your domain can join the workspace.