SSO & SAML

Set up SAML single sign-on for Supademo with Okta, Microsoft Entra, Google, or OneLogin — connection values, per-provider setup steps, and activation.

Supademo supports SAML 2.0 single sign-on on the Enterprise plan, so your team signs in through your identity provider — Okta, Microsoft Entra ID (Azure AD), Google Workspace, OneLogin, or any SAML 2.0 provider — and new users are added to your organization's workspace automatically.

SSO/SAML is only available on Enterprise plans. To require SSO before someone can view a specific demo (not just sign in), see share permissions.

Your Supademo connection values

Every identity provider asks for the same two values when you create the Supademo SAML application:

Field (name varies by provider)	Value
ACS URL / Single sign-on URL / Reply URL	https://sso.supademo.com/api/oauth/saml
Entity ID / Audience URI / Identifier	https://sso.supademo.com

Google Workspace

Follow the steps in this interactive walkthrough to create the SAML app in your Google Admin console:

Microsoft Entra ID (Azure AD)

Create an enterprise application in Microsoft Entra ID and, when prompted, enter the connection values from the table above:

• ACS URL (Reply URL): https://sso.supademo.com/api/oauth/saml

• Entity ID (Identifier): https://sso.supademo.com

Okta

Create a SAML 2.0 app integration in Okta with these values:

• Single sign-on URL (ACS URL): https://sso.supademo.com/api/oauth/saml

• Audience URI (SP Entity ID): https://sso.supademo.com

For the full Okta setup process with screenshots, see this step-by-step guide.

OneLogin

Follow the steps in this interactive walkthrough:

Activate SSO for your organization

1. Complete the SAML configuration in your identity provider using the values above.

2. Download the Metadata XML file from your provider.

3. Email the file to [e-mail]. Supademo enables SSO for your organization within 24 hours. [VERIFY: confirm whether activation is now self-serve or still support-assisted]

4. Once activated, sign in at app.supademo.com/login with your admin email and create your workspace. From then on, anyone in your organization who signs in through SSO is added to that workspace automatically.

FAQ

Does Supademo support SAML single sign-on?

Yes. Supademo supports SAML 2.0 SSO on the Enterprise plan, and it works with any SAML 2.0 identity provider, including Okta, Microsoft Entra ID, Google Workspace, and OneLogin.

What ACS URL and Entity ID do I use for Supademo?

Use https://sso.supademo.com/api/oauth/saml as the ACS URL (also called the single sign-on or reply URL) and https://sso.supademo.com as the Entity ID (also called the audience URI or identifier).

Can I require SSO to view a demo?

Yes. Demos can be gated behind your workspace SSO so only authenticated members of your organization can open them — see share permissions.