SAML Single Sign-On (SSO) allows your school, enterprise, or print farm to connect SimplyPrint with your existing identity provider (IdP), such as Google Workspace, Microsoft Entra (Azure AD), Okta, OneLogin, Auth0, or education-focused IdPs like Shibboleth. This means users can log in with the same account they already use at school or work — no extra passwords needed.

Tip: if you or anyone from your team already has a SimplyPrint account, created without SSO, you can link your account after setting up SSO! More here: Linking your existing SimplyPrint account to your SSO account

Using Google Workspace, Microsoft Entra ID or Auth0?

Check out our guide specifically for Google Workspace or Microsoft Entra here;

• Federation: InCommon, eduGAIN, WAYF or any other InCommon or eduGAIN members: Set up Federation-based SAML Single Sign-On (SSO) for SimplyPrint
• Google Workspace SSO setup guide: Set up Google Workspace Single sign-on (SSO) for SimplyPrint
• Microsoft Entra SSO setup guide: Setting up SAML Single Sign-On (SSO) with Microsoft Entra ID for SimplyPrint
• Auth0 setup guide: Set up Auth0 Single Sign-On (SSO) for SimplyPrint

Otherwise, here's a general guide that applies to all idP SSO providers;

Step 1: Get your SimplyPrint metadata

Every SimplyPrint organization has a unique metadata file. This metadata describes SimplyPrint as a “Service Provider (SP)” and is required when setting up the connection inside your Identity Provider (IdP).

• Go to Organization Settings → Registration & SSO in SimplyPrint.
• Under SAML Single Sign-On (SSO), click Edit SAML Configuration.
• At the top of the popup, you’ll see a link to your unique metadata file, like: https://simplyprint.io/saml/[your-account-id]/metadata

This file contains everything your IdP needs to know about SimplyPrint:

• SP Entity ID
• Assertion Consumer Service (ACS) URL (where login responses are sent)
• Supported bindings (Redirect and POST)
• Logout URL (if supported)

👉 In most IdPs, you can either upload this XML file directly or copy the values into your SAML app configuration.

Step 2: Configure SimplyPrint with your IdP details

Once SimplyPrint is registered in your IdP, you’ll need to provide SimplyPrint with your IdP’s information.

In Organization Settings → Registration & SSO → Edit SAML Configuration, fill in:

• Entity ID (Issuer) – The unique identifier from your IdP.
• X.509 Certificate – The signing certificate from your IdP (starts with -----BEGIN CERTIFICATE-----).
• SSO URL (Login URL) – The login endpoint your IdP provides.
• SSO Binding – Most IdPs use HTTP-Redirect, but some require HTTP-POST.

Step 3: Map user attributes

SimplyPrint needs to know which IdP attributes correspond to user information.

Required mappings

👉 Attribute names may look clean (givenName) but sometimes they are technical OIDs or SOAP schemas. This is normal.

Optional mappings for all organizations

Additional mappings for schools

Step 4: Save and test the connection

1. Click Save in SimplyPrint.
2. Log out and try logging in using the new SAML SSO option.
3. If login fails:

• Double-check your Entity ID, SSO URL, and certificate.
• Ensure attribute mappings match what your IdP provides.
• Try switching the SSO binding (Redirect ↔ Post).

Step 5: List your organization/school on the login page (optional)

To make it easy for users to find you when signing in:

1. Go to Organization Settings → Registration & SSO (https://simplyprint.io/panel/settings/organization#registration)
2. Enable “Show school/organization in the public list shown on login page.”
3. Your organization will now appear in the dropdown list at:

• https://simplyprint.io/panel/login
• https://simplyprint.io/panel/login/school

Example scenarios

• Schools:
• Students and teachers log in with their school accounts.
• Teachers are automatically flagged using the isTeacher attribute.
• Students can be assigned to classes from the classes attribute.
• Enterprises / print farms:
• Employees use corporate logins (Okta, Entra, OneLogin).
• Groups from the IdP can be mapped to SimplyPrint roles.

Link existing accounts (email & password signups) to an SSO account

If you, members of your team or students have already signed up for your SimplyPrint organization without SSO, by simply registering on our site with their name, email and password, they can

Learn how to here: Linking your existing SimplyPrint account to your SSO account

Issues? Troubleshoot your SSO integration here!

Visit our "SSO troubleshooting" guide for troubleshooting help: SSO troubleshooting: how to fix errors like "first_name not set"