Feature Update : Single Sign-On (SSO) with SAML for Seamless Enterprise Access

We are excited to announce a significant new feature for our enterprise users — Single Sign-On (SSO) using SAML is now fully supported on our platform!

Whether you’re generating verifiable certificates, licenses, or secure reports using Qryptal’s Secured QR codes, you can now integrate seamlessly with your organization’s Identity Provider (IdP) for a smoother, more secure login experience.

🔐 What is SAML-Based SSO?

SAML (Security Assertion Markup Language) is a widely adopted standard for exchanging authentication and authorization data between systems. With SAML-based SSO, your users can authenticate using your existing corporate credentials — no need for separate usernames and passwords.

SSO Benefits:

• Centralized user management via your IdP (e.g., Azure AD, Okta, ADFS)
• Enhanced security with enforced MFA and access controls
• Streamlined user experience with one-click access
• Simplified onboarding and offboarding

💼 Who is it for?

This feature is ideal for:

• Enterprises managing large teams
• Organizations with strict IT security and compliance needs
• Customers already using an Identity Provider with SAML support

⚙️ How it Works

Once enabled, users will be redirected to your Identity Provider to log in. Upon successful authentication, access is granted to the Qryptal platform, and users can immediately begin generating documents with Qryptal’s secure QR codes.

SAML SSO Flow Diagram.

🛠️ How to Get Started

1. Contact Support
   Reach out to our support team or your account manager to enable SAML SSO for your organization.

2. Provide IdP Metadata
   We’ll need your IdP’s metadata URL or XML file. We support all major IdPs including:

   • Microsoft Entra ID (Azure AD)
   • Okta
   • Google Workspace
   • ADFS

3. We Configure and Verify
   Our team will configure and test the integration with you.

4. Roll Out to Your Users
   Once verified, users can start logging in via your corporate SSO.

🔍 Automatic User Role Provisioning

In addition to SSO, we support Just-In-Time (JIT) user provisioning. Users with appropriate role are automatically created upon their first SSO login based on attributes in the SAML assertion — no manual user management required.

📄 Related Features

This update pairs well with:

• Audit Logs for login activity tracking
• Role-Based Access Control (RBAC) for fine-grained permissions

🤝 Ready to Enable SSO?

We’re here to help you streamline access while keeping security airtight.
📬 Contact us to learn more and begin integration.

Recommendation: You may like to explore more …

Navigating the Future of Document Security with Qryptal

Whitepaper on Document Security

A 5-Point Checklist for Secure QR Codes

Implementing Secure QR Codes: A Comprehensive Guide