Skip to main content

SAML single sign-on is not available yet

SAML SSO is not available yet

fremforge has no SAML 2.0 service provider. Earlier versions of this page described one; it was never live, and an SSO source of type SAML cannot be registered. Connect your identity provider with OIDC instead.

Use OIDC

Every identity provider this page used to list speaks OpenID Connect:

  • Microsoft Entra ID: register an app and use the issuer https://login.microsoftonline.com/<tenant-id>/v2.0. See OIDC SSO, Microsoft Entra.
  • ADFS (Windows Server 2016 and later): add an application group with a server application and use the issuer https://<your-adfs-host>/adfs. See OIDC SSO, ADFS.
  • Okta, Authentik, Keycloak, Google Workspace, Auth0: see OIDC SSO.

After the basic wiring works, turn on OIDC MFA verification so every sign-in has to prove MFA, and pair it with SCIM for user lifecycle.

If you need SAML

Tell us at support@frem.sh which identity provider you use and why OIDC does not fit. A SAML service provider is on the roadmap but has no date.